CVE-2002-1368
EXPLOITEDCUPS 1.1.14-1.1.17 - DoS and RCE via Negative Content-Length or Chunked Encoding
Title source: llmExploitation Summary
CVE-2002-1368 has been observed exploited in the wild (reported by VulnCheck KEV). EIP tracks 1 public exploit from researchers including iDefense.
AI-analyzed exploit summary This exploit demonstrates a denial-of-service (DoS) vulnerability in CUPS by sending malformed HTTP headers with negative Content-Length or chunked Transfer-Encoding values, causing the cupsd service to crash. It may also allow remote code execution on certain platforms.
Description
Common Unix Printing System (CUPS) 1.1.14 through 1.1.17 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code by causing negative arguments to be fed into memcpy() calls via HTTP requests with (1) a negative Content-Length value or (2) a negative length in a chunked transfer encoding.
Exploits (1)
This exploit demonstrates a denial-of-service (DoS) vulnerability in CUPS by sending malformed HTTP headers with negative Content-Length or chunked Transfer-Encoding values, causing the cupsd service to crash. It may also allow remote code execution on certain platforms.