Ubuntu CUPS Package AppArmor Security Bypass Weakness

Bugtraq ID:	45710
Class:	Race Condition Error
CVE:
Remote:	Yes
Local:	No
Published:	Jan 07 2011 12:00AM
Updated:	Jan 07 2011 12:00AM
Credit:	Reported by the vendor.
Vulnerable:	Ubuntu Ubuntu Linux 10.10 powerpc Ubuntu Ubuntu Linux 10.10 i386 Ubuntu Ubuntu Linux 10.10 ARM Ubuntu Ubuntu Linux 10.10 amd64
Not Vulnerable:

Ubuntu CUPS Package AppArmor Security Bypass Weakness

The Ubuntu CUPS package is prone to a security-bypass weakness that may cause the application to run without AppArmor protection.

Attackers who exploit a different vulnerability in the vulnerable application may bypass additional intended security restrictions. This may aid in further attacks.

Ubuntu CUPS Package AppArmor Security Bypass Weakness

Attackers can exploit this issue using standard tools.

Ubuntu CUPS Package AppArmor Security Bypass Weakness

Solution:
Updates are available. Please see the references for more information.


Ubuntu Ubuntu Linux 10.10 amd64

• Ubuntu libcupsdriver1_1.4.4-6ubuntu2.3_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/c/cups/libcupsdriver1_1.4. 4-6ubuntu2.3_amd64.deb


• Ubuntu libcupscgi1_1.4.4-6ubuntu2.3_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/c/cups/libcupscgi1_1.4.4-6 ubuntu2.3_amd64.deb


• Ubuntu cups-client_1.4.4-6ubuntu2.3_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/c/cups/cups-client_1.4.4-6 ubuntu2.3_amd64.deb


• Ubuntu cupsddk_1.4.4-6ubuntu2.3_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/c/cups/cupsddk_1.4.4-6 ubuntu2.3_all.deb


• Ubuntu libcupscgi1-dev_1.4.4-6ubuntu2.3_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/c/cups/libcupscgi1-dev_1.4 .4-6ubuntu2.3_amd64.deb


• Ubuntu libcupsimage2_1.4.4-6ubuntu2.3_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/c/cups/libcupsimage2_1.4.4 -6ubuntu2.3_amd64.deb


• Ubuntu cups-dbg_1.4.4-6ubuntu2.3_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/c/cups/cups-dbg_1.4.4-6ubu ntu2.3_amd64.deb


• Ubuntu libcupsppdc1-dev_1.4.4-6ubuntu2.3_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/c/cups/libcupsppdc1-dev_1. 4.4-6ubuntu2.3_amd64.deb


• Ubuntu libcupsmime1-dev_1.4.4-6ubuntu2.3_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/c/cups/libcupsmime1-dev_1. 4.4-6ubuntu2.3_amd64.deb


• Ubuntu libcups2_1.4.4-6ubuntu2.3_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/c/cups/libcups2_1.4.4-6ubu ntu2.3_amd64.deb


• Ubuntu cups-bsd_1.4.4-6ubuntu2.3_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/c/cups/cups-bsd_1.4.4-6ubu ntu2.3_amd64.deb


• Ubuntu libcupsimage2-dev_1.4.4-6ubuntu2.3_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/c/cups/libcupsimage2-dev_1 .4.4-6ubuntu2.3_amd64.deb


• Ubuntu libcups2-dev_1.4.4-6ubuntu2.3_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/c/cups/libcups2-dev_1.4.4- 6ubuntu2.3_amd64.deb


• Ubuntu cups-common_1.4.4-6ubuntu2.3_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/c/cups/cups-common_1.4.4-6 ubuntu2.3_all.deb


• Ubuntu libcupsmime1_1.4.4-6ubuntu2.3_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/c/cups/libcupsmime1_1.4.4- 6ubuntu2.3_amd64.deb


• Ubuntu libcupsdriver1-dev_1.4.4-6ubuntu2.3_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/c/cups/libcupsdriver1-dev_ 1.4.4-6ubuntu2.3_amd64.deb


• Ubuntu cups-ppdc_1.4.4-6ubuntu2.3_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/universe/c/cups/cups-ppdc_1.4.4 -6ubuntu2.3_amd64.deb


• Ubuntu libcupsppdc1_1.4.4-6ubuntu2.3_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/c/cups/libcupsppdc1_1.4.4- 6ubuntu2.3_amd64.deb


• Ubuntu cups_1.4.4-6ubuntu2.3_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/c/cups/cups_1.4.4-6ubuntu2 .3_amd64.deb

Ubuntu Ubuntu Linux 10.10 powerpc

• Ubuntu libcupsimage2_1.4.4-6ubuntu2.3_powerpc.deb
  http://ports.ubuntu.com/pool/main/c/cups/libcupsimage2_1.4.4-6ubuntu2. 3_powerpc.deb


• Ubuntu libcupscgi1-dev_1.4.4-6ubuntu2.3_powerpc.deb
  http://ports.ubuntu.com/pool/main/c/cups/libcupscgi1-dev_1.4.4-6ubuntu 2.3_powerpc.deb


• Ubuntu cups-ppdc_1.4.4-6ubuntu2.3_powerpc.deb
  http://ports.ubuntu.com/pool/universe/c/cups/cups-ppdc_1.4.4-6ubuntu2. 3_powerpc.deb


• Ubuntu libcupsmime1-dev_1.4.4-6ubuntu2.3_powerpc.deb
  http://ports.ubuntu.com/pool/main/c/cups/libcupsmime1-dev_1.4.4-6ubunt u2.3_powerpc.deb


• Ubuntu cups-dbg_1.4.4-6ubuntu2.3_powerpc.deb
  http://ports.ubuntu.com/pool/main/c/cups/cups-dbg_1.4.4-6ubuntu2.3_pow erpc.deb


• Ubuntu libcupsdriver1_1.4.4-6ubuntu2.3_powerpc.deb
  http://ports.ubuntu.com/pool/main/c/cups/libcupsdriver1_1.4.4-6ubuntu2 .3_powerpc.deb


• Ubuntu libcupsmime1_1.4.4-6ubuntu2.3_powerpc.deb
  http://ports.ubuntu.com/pool/main/c/cups/libcupsmime1_1.4.4-6ubuntu2.3 _powerpc.deb


• Ubuntu cups_1.4.4-6ubuntu2.3_powerpc.deb
  http://ports.ubuntu.com/pool/main/c/cups/cups_1.4.4-6ubuntu2.3_powerpc .deb


• Ubuntu libcups2_1.4.4-6ubuntu2.3_powerpc.deb
  http://ports.ubuntu.com/pool/main/c/cups/libcups2_1.4.4-6ubuntu2.3_pow erpc.deb


• Ubuntu libcupsimage2-dev_1.4.4-6ubuntu2.3_powerpc.deb
  http://ports.ubuntu.com/pool/main/c/cups/libcupsimage2-dev_1.4.4-6ubun tu2.3_powerpc.deb


• Ubuntu libcups2-dev_1.4.4-6ubuntu2.3_powerpc.deb
  http://ports.ubuntu.com/pool/main/c/cups/libcups2-dev_1.4.4-6ubuntu2.3 _powerpc.deb


• Ubuntu libcupsppdc1_1.4.4-6ubuntu2.3_powerpc.deb
  http://ports.ubuntu.com/pool/main/c/cups/libcupsppdc1_1.4.4-6ubuntu2.3 _powerpc.deb


• Ubuntu cups-bsd_1.4.4-6ubuntu2.3_powerpc.deb
  http://ports.ubuntu.com/pool/main/c/cups/cups-bsd_1.4.4-6ubuntu2.3_pow erpc.deb


• Ubuntu libcupsppdc1-dev_1.4.4-6ubuntu2.3_powerpc.deb
  http://ports.ubuntu.com/pool/main/c/cups/libcupsppdc1-dev_1.4.4-6ubunt u2.3_powerpc.deb


• Ubuntu cupsddk_1.4.4-6ubuntu2.3_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/c/cups/cupsddk_1.4.4-6 ubuntu2.3_all.deb


• Ubuntu cups-common_1.4.4-6ubuntu2.3_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/c/cups/cups-common_1.4.4-6 ubuntu2.3_all.deb


• Ubuntu libcupsdriver1-dev_1.4.4-6ubuntu2.3_powerpc.deb
  http://ports.ubuntu.com/pool/main/c/cups/libcupsdriver1-dev_1.4.4-6ubu ntu2.3_powerpc.deb


• Ubuntu cups-client_1.4.4-6ubuntu2.3_powerpc.deb
  http://ports.ubuntu.com/pool/main/c/cups/cups-client_1.4.4-6ubuntu2.3_ powerpc.deb


• Ubuntu libcupscgi1_1.4.4-6ubuntu2.3_powerpc.deb
  http://ports.ubuntu.com/pool/main/c/cups/libcupscgi1_1.4.4-6ubuntu2.3_ powerpc.deb

Ubuntu Ubuntu Linux 10.10 ARM

• Ubuntu libcupscgi1-dev_1.4.4-6ubuntu2.3_armel.deb
  http://ports.ubuntu.com/pool/main/c/cups/libcupscgi1-dev_1.4.4-6ubuntu 2.3_armel.deb


• Ubuntu cups-common_1.4.4-6ubuntu2.3_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/c/cups/cups-common_1.4.4-6 ubuntu2.3_all.deb


• Ubuntu cups-client_1.4.4-6ubuntu2.3_armel.deb
  http://ports.ubuntu.com/pool/main/c/cups/cups-client_1.4.4-6ubuntu2.3_ armel.deb


• Ubuntu libcupsimage2-dev_1.4.4-6ubuntu2.3_armel.deb
  http://ports.ubuntu.com/pool/main/c/cups/libcupsimage2-dev_1.4.4-6ubun tu2.3_armel.deb


• Ubuntu libcupscgi1_1.4.4-6ubuntu2.3_armel.deb
  http://ports.ubuntu.com/pool/main/c/cups/libcupscgi1_1.4.4-6ubuntu2.3_ armel.deb


• Ubuntu libcupsimage2_1.4.4-6ubuntu2.3_armel.deb
  http://ports.ubuntu.com/pool/main/c/cups/libcupsimage2_1.4.4-6ubuntu2. 3_armel.deb


• Ubuntu cups-ppdc_1.4.4-6ubuntu2.3_armel.deb
  http://ports.ubuntu.com/pool/universe/c/cups/cups-ppdc_1.4.4-6ubuntu2. 3_armel.deb


• Ubuntu cupsddk_1.4.4-6ubuntu2.3_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/c/cups/cupsddk_1.4.4-6 ubuntu2.3_all.deb


• Ubuntu libcupsdriver1-dev_1.4.4-6ubuntu2.3_armel.deb
  http://ports.ubuntu.com/pool/main/c/cups/libcupsdriver1-dev_1.4.4-6ubu ntu2.3_armel.deb


• Ubuntu libcups2-dev_1.4.4-6ubuntu2.3_armel.deb
  http://ports.ubuntu.com/pool/main/c/cups/libcups2-dev_1.4.4-6ubuntu2.3 _armel.deb


• Ubuntu cups_1.4.4-6ubuntu2.3_armel.deb
  http://ports.ubuntu.com/pool/main/c/cups/cups_1.4.4-6ubuntu2.3_armel.d eb


• Ubuntu libcupsmime1_1.4.4-6ubuntu2.3_armel.deb
  http://ports.ubuntu.com/pool/main/c/cups/libcupsmime1_1.4.4-6ubuntu2.3 _armel.deb


• Ubuntu libcupsppdc1_1.4.4-6ubuntu2.3_armel.deb
  http://ports.ubuntu.com/pool/main/c/cups/libcupsppdc1_1.4.4-6ubuntu2.3 _armel.deb


• Ubuntu libcupsmime1-dev_1.4.4-6ubuntu2.3_armel.deb
  http://ports.ubuntu.com/pool/main/c/cups/libcupsmime1-dev_1.4.4-6ubunt u2.3_armel.deb


• Ubuntu libcupsdriver1_1.4.4-6ubuntu2.3_armel.deb
  http://ports.ubuntu.com/pool/main/c/cups/libcupsdriver1_1.4.4-6ubuntu2 .3_armel.deb


• Ubuntu cups-bsd_1.4.4-6ubuntu2.3_armel.deb
  http://ports.ubuntu.com/pool/main/c/cups/cups-bsd_1.4.4-6ubuntu2.3_arm el.deb


• Ubuntu cups-dbg_1.4.4-6ubuntu2.3_armel.deb
  http://ports.ubuntu.com/pool/main/c/cups/cups-dbg_1.4.4-6ubuntu2.3_arm el.deb


• Ubuntu libcups2_1.4.4-6ubuntu2.3_armel.deb
  http://ports.ubuntu.com/pool/main/c/cups/libcups2_1.4.4-6ubuntu2.3_arm el.deb


• Ubuntu libcupsppdc1-dev_1.4.4-6ubuntu2.3_armel.deb
  http://ports.ubuntu.com/pool/main/c/cups/libcupsppdc1-dev_1.4.4-6ubunt u2.3_armel.deb

Ubuntu Ubuntu Linux 10.10 i386

• Ubuntu libcupsdriver1-dev_1.4.4-6ubuntu2.3_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/c/cups/libcupsdriver1-dev_ 1.4.4-6ubuntu2.3_i386.deb


• Ubuntu libcupsimage2-dev_1.4.4-6ubuntu2.3_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/c/cups/libcupsimage2-dev_1 .4.4-6ubuntu2.3_i386.deb


• Ubuntu cups-common_1.4.4-6ubuntu2.3_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/c/cups/cups-common_1.4.4-6 ubuntu2.3_all.deb


• Ubuntu libcupscgi1_1.4.4-6ubuntu2.3_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/c/cups/libcupscgi1_1.4.4-6 ubuntu2.3_i386.deb


• Ubuntu cups-client_1.4.4-6ubuntu2.3_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/c/cups/cups-client_1.4.4-6 ubuntu2.3_i386.deb


• Ubuntu libcupsppdc1_1.4.4-6ubuntu2.3_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/c/cups/libcupsppdc1_1.4.4- 6ubuntu2.3_i386.deb


• Ubuntu cups_1.4.4-6ubuntu2.3_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/c/cups/cups_1.4.4-6ubuntu2 .3_i386.deb


• Ubuntu libcups2-dev_1.4.4-6ubuntu2.3_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/c/cups/libcups2-dev_1.4.4- 6ubuntu2.3_i386.deb


• Ubuntu libcupsmime1_1.4.4-6ubuntu2.3_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/c/cups/libcupsmime1_1.4.4- 6ubuntu2.3_i386.deb


• Ubuntu libcupsimage2_1.4.4-6ubuntu2.3_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/c/cups/libcupsimage2_1.4.4 -6ubuntu2.3_i386.deb


• Ubuntu libcupscgi1-dev_1.4.4-6ubuntu2.3_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/c/cups/libcupscgi1-dev_1.4 .4-6ubuntu2.3_i386.deb


• Ubuntu libcups2_1.4.4-6ubuntu2.3_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/c/cups/libcups2_1.4.4-6ubu ntu2.3_i386.deb


• Ubuntu cups-dbg_1.4.4-6ubuntu2.3_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/c/cups/cups-dbg_1.4.4-6ubu ntu2.3_i386.deb


• Ubuntu libcupsmime1-dev_1.4.4-6ubuntu2.3_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/c/cups/libcupsmime1-dev_1. 4.4-6ubuntu2.3_i386.deb


• Ubuntu libcupsdriver1_1.4.4-6ubuntu2.3_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/c/cups/libcupsdriver1_1.4. 4-6ubuntu2.3_i386.deb


• Ubuntu cups-ppdc_1.4.4-6ubuntu2.3_i386.deb
  http://security.ubuntu.com/ubuntu/pool/universe/c/cups/cups-ppdc_1.4.4 -6ubuntu2.3_i386.deb


• Ubuntu cups-bsd_1.4.4-6ubuntu2.3_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/c/cups/cups-bsd_1.4.4-6ubu ntu2.3_i386.deb


• Ubuntu libcupsppdc1-dev_1.4.4-6ubuntu2.3_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/c/cups/libcupsppdc1-dev_1. 4.4-6ubuntu2.3_i386.deb


• Ubuntu cupsddk_1.4.4-6ubuntu2.3_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/c/cups/cupsddk_1.4.4-6 ubuntu2.3_all.deb

Ubuntu CUPS Package AppArmor Security Bypass Weakness

References:

• Ubuntu Homepage (Ubuntu)