CVE-2002-1369

CUPS 1.1.14-1.1.17 - Remote Code Execution via Options String Buffer Overflow

Title source: llm

Description

jobs.c in Common Unix Printing System (CUPS) 1.1.14 through 1.1.17 does not properly use the strncat function call when processing the options string, which allows remote attackers to execute arbitrary code via a buffer overflow attack.

References (10)

Core 10

Core References

Exploit, Vendor Advisory x_refsource_misc

http://www.idefense.com/advisory/12.19.02.txt

Vendor Advisory vendor-advisory x_refsource_redhat

http://www.redhat.com/support/errata/RHSA-2002-295.html

Various Sources vendor-advisory x_refsource_mandrake

http://www.mandrakesoft.com/security/advisories?name=MDKSA-2003:001

Third Party Advisory, VDB Entry vdb-entry x_refsource_xf

https://exchange.xforce.ibmcloud.com/vulnerabilities/10910

Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/6438

Third Party Advisory mailing-list x_refsource_vulnwatch

http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0117.html

Vendor Advisory vendor-advisory x_refsource_conectiva

http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000702

Third Party Advisory vendor-advisory x_refsource_debian

http://www.debian.org/security/2003/dsa-232

Vendor Advisory vendor-advisory x_refsource_suse

http://www.novell.com/linux/security/advisories/2003_002_cups.html

Mailing List mailing-list x_refsource_bugtraq

http://marc.info/?l=bugtraq&m=104032149026670&w=2

Scores

EPSS 0.0820

EPSS Percentile 94.3%

Details

Status published

Products (15)

apple/mac_os_x 10.2

apple/mac_os_x 10.2.2

easy_software_products/cups 1.0.4

easy_software_products/cups 1.0.4_8

easy_software_products/cups 1.1.1

easy_software_products/cups 1.1.4

easy_software_products/cups 1.1.4_2

easy_software_products/cups 1.1.4_3

easy_software_products/cups 1.1.4_5

easy_software_products/cups 1.1.6

... and 5 more

Published Dec 26, 2002

Tracked Since Feb 18, 2026