Common UNIX Printing System SNMP 'asn1_get_string()' Remote Buffer Overflow Vulnerability
BID:26917
Info
Common UNIX Printing System SNMP 'asn1_get_string()' Remote Buffer Overflow Vulnerability
| Bugtraq ID: | 26917 |
| Class: | Boundary Condition Error |
| CVE: |
CVE-2007-5849 |
| Remote: | Yes |
| Local: | No |
| Published: | Nov 08 2007 12:00AM |
| Updated: | May 07 2015 05:04PM |
| Credit: | Wei Wang of McAfee AVERT Research discovered this issue. |
| Vulnerable: |
Ubuntu Ubuntu Linux 7.10 sparc Ubuntu Ubuntu Linux 7.10 powerpc Ubuntu Ubuntu Linux 7.10 i386 Ubuntu Ubuntu Linux 7.10 amd64 Ubuntu Ubuntu Linux 7.04 sparc Ubuntu Ubuntu Linux 7.04 powerpc Ubuntu Ubuntu Linux 7.04 i386 Ubuntu Ubuntu Linux 7.04 amd64 Ubuntu Ubuntu Linux 6.10 sparc Ubuntu Ubuntu Linux 6.10 powerpc Ubuntu Ubuntu Linux 6.10 i386 Ubuntu Ubuntu Linux 6.10 amd64 Ubuntu Ubuntu Linux 6.06 LTS sparc Ubuntu Ubuntu Linux 6.06 LTS powerpc Ubuntu Ubuntu Linux 6.06 LTS i386 Ubuntu Ubuntu Linux 6.06 LTS amd64 SuSE openSUSE 10.3 S.u.S.E. openSUSE 10.2 Mandriva Linux Mandrake 2008.0 x86_64 Mandriva Linux Mandrake 2008.0 Mandriva Linux Mandrake 2007.1 x86_64 Mandriva Linux Mandrake 2007.1 Mandriva Linux Mandrake 2007.0 x86_64 Mandriva Linux Mandrake 2007.0 MandrakeSoft Corporate Server 4.0 x86_64 MandrakeSoft Corporate Server 3.0 x86_64 MandrakeSoft Corporate Server 3.0 MandrakeSoft Corporate Server 4.0 Gentoo Linux Easy Software Products CUPS 1.3.3 Easy Software Products CUPS 1.2.12 Easy Software Products CUPS 1.2.10 Easy Software Products CUPS 1.2.9 Easy Software Products CUPS 1.2.4 Debian Linux 4.0 sparc Debian Linux 4.0 s/390 Debian Linux 4.0 powerpc Debian Linux 4.0 mipsel Debian Linux 4.0 mips Debian Linux 4.0 m68k Debian Linux 4.0 ia-64 Debian Linux 4.0 ia-32 Debian Linux 4.0 hppa Debian Linux 4.0 arm Debian Linux 4.0 amd64 Debian Linux 4.0 alpha Debian Linux 4.0 |
| Not Vulnerable: |
Apple CUPS 1.3.5 |
Discussion
Common UNIX Printing System SNMP 'asn1_get_string()' Remote Buffer Overflow Vulnerability
Common UNIX Printing System (CUPS) is prone to a remote buffer-overflow vulnerability because the software fails to properly bounds-check user-supplied data before copying it to an insufficiently sized buffer.
Exploiting this issue allows attackers to execute arbitrary machine code in the context of users running the affected software. Failed exploit attempts will likely result in denial-of-service conditions.
This issue affects CUPS 1.2 and 1.3, prior to 1.3.5; other versions may also be vulnerable.
Common UNIX Printing System (CUPS) is prone to a remote buffer-overflow vulnerability because the software fails to properly bounds-check user-supplied data before copying it to an insufficiently sized buffer.
Exploiting this issue allows attackers to execute arbitrary machine code in the context of users running the affected software. Failed exploit attempts will likely result in denial-of-service conditions.
This issue affects CUPS 1.2 and 1.3, prior to 1.3.5; other versions may also be vulnerable.
Exploit / POC
Common UNIX Printing System SNMP 'asn1_get_string()' Remote Buffer Overflow Vulnerability
A proof of concept is available.
A proof of concept is available.
Solution / Fix
Common UNIX Printing System SNMP 'asn1_get_string()' Remote Buffer Overflow Vulnerability
Solution:
The vendor has released a patch for this issue. Please see the referenced advisories for information on obtaining and applying the appropriate updates.
Solution:
The vendor has released a patch for this issue. Please see the referenced advisories for information on obtaining and applying the appropriate updates.
References
Common UNIX Printing System SNMP 'asn1_get_string()' Remote Buffer Overflow Vulnerability
References:
References: