CUPS Unspecified Configuration Vulnerability

Bugtraq ID:	10062
Class:	Configuration Error
CVE:	CVE-2004-0382
Remote:	No
Local:	No
Published:	Apr 06 2004 12:00AM
Updated:	Jul 12 2009 04:06AM
Credit:	Discovery of this issue has been credited to [email protected].
Vulnerable:	Easy Software Products CUPS 1.1.19 rc5 Easy Software Products CUPS 1.1.19 + Mandriva Linux Mandrake 9.2 amd64 + Mandriva Linux Mandrake 9.2 + Turbolinux Appliance Server 1.0 Workgroup Edition + Turbolinux Appliance Server 1.0 Hosting Edition + Turbolinux Appliance Server Hosting Edition 1.0 + Turbolinux Appliance Server Workgroup Edition 1.0 + Turbolinux Home + Turbolinux Turbolinux Desktop 10.0 + Turbolinux Turbolinux Server 8.0 + Turbolinux Turbolinux Workstation 8.0 Easy Software Products CUPS 1.1.18 + MandrakeSoft Corporate Server 2.1 x86_64 + MandrakeSoft Corporate Server 2.1 + MandrakeSoft Multi Network Firewall 2.0 + Mandriva Linux Mandrake 9.0 + S.u.S.E. Linux Personal 8.2 Easy Software Products CUPS 1.1.17 + Redhat Desktop 3.0 + Redhat Enterprise Linux AS 3 + Redhat Enterprise Linux ES 3 + Redhat Enterprise Linux WS 3 Easy Software Products CUPS 1.1.16 + Mandriva Linux Mandrake 9.0 Easy Software Products CUPS 1.1.15 + Conectiva Linux Enterprise Edition 1.0 + SuSE Linux 8.1 Easy Software Products CUPS 1.1.14 + Debian Linux 3.0 sparc + Debian Linux 3.0 s/390 + Debian Linux 3.0 ppc + Debian Linux 3.0 mipsel + Debian Linux 3.0 mips + Debian Linux 3.0 m68k + Debian Linux 3.0 ia-64 + Debian Linux 3.0 ia-32 + Debian Linux 3.0 hppa + Debian Linux 3.0 arm + Debian Linux 3.0 alpha + Debian Linux 3.0 + Mandriva Linux Mandrake 8.2 ppc + Mandriva Linux Mandrake 8.2 Easy Software Products CUPS 1.1.13 Easy Software Products CUPS 1.1.12 + SuSE Linux 8.0 i386 + SuSE Linux 8.0 Easy Software Products CUPS 1.1.10 + Caldera OpenLinux Server 3.1.1 + Caldera OpenLinux Workstation 3.1.1 + Mandriva Linux Mandrake 8.1 ia64 + Mandriva Linux Mandrake 8.1 + SuSE Linux 7.3 sparc + SuSE Linux 7.3 ppc + SuSE Linux 7.3 i386 Apple Mac OS X Server 10.3.3 Apple Mac OS X Server 10.3.2 Apple Mac OS X Server 10.3.1 Apple Mac OS X Server 10.3 Apple Mac OS X Server 10.2.8
Not Vulnerable:

CUPS Unspecified Configuration Vulnerability

It has been reported that CUPS is prone to an unspecified configuration file vulnerability.

Currently details surrounding this issue are insufficient to provide more information. This BID will be updated when new information becomes available.

CUPS Unspecified Configuration Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

CUPS Unspecified Configuration Vulnerability

Solution:
Apple has released a security advisory (APPLE-SA-2004-04-05) for Mac OSX/OSX Server versions 10.3.3 and 10.2.8. Customers are advised to apply this update as soon as possible. Update is linked below. These fixes were originally added to Cups Internet Printing Protocol Job Loop Denial Of Service Vulnerability (BID 8952).


Apple Mac OS X Server 10.2.8

• Apple SecUpd2004-04-05Jag.dmg
  http://apple.speedera.net/download.info.apple.com/Apple_Support/SecUpd 2004-04-05Jag.dmg

Apple Mac OS X Server 10.3

• Apple SecUpd2004-04-05Jag.dmg
  http://apple.speedera.net/download.info.apple.com/Apple_Support/SecUpd 2004-04-05Jag.dmg

Apple Mac OS X Server 10.3.1

• Apple SecUpd2004-04-05Jag.dmg
  http://apple.speedera.net/download.info.apple.com/Apple_Support/SecUpd 2004-04-05Jag.dmg

Apple Mac OS X Server 10.3.2

• Apple SecUpd2004-04-05Jag.dmg
  http://apple.speedera.net/download.info.apple.com/Apple_Support/SecUpd 2004-04-05Jag.dmg

Apple Mac OS X Server 10.3.3

• Apple SecUpd2004-04-05Jag.dmg
  http://apple.speedera.net/download.info.apple.com/Apple_Support/SecUpd 2004-04-05Jag.dmg


• Apple SecUpd2004-04-05Pan.dmg
  http://wsidecar.apple.com/cgi-bin/nph-reg3rdpty1.pl/product=03993&plat form=osx&method=sa/SecUpd2004-04-05Pan.dmg

CUPS Unspecified Configuration Vulnerability

References: