CUPS CVE-2015-1159 Cross Site Scripting Vulnerability
BID:75106
Info
CUPS CVE-2015-1159 Cross Site Scripting Vulnerability
| Bugtraq ID: | 75106 |
| Class: | Input Validation Error |
| CVE: |
CVE-2015-1159 |
| Remote: | Yes |
| Local: | No |
| Published: | Jun 09 2015 12:00AM |
| Updated: | Dec 07 2015 10:17PM |
| Credit: | CERT/CC |
| Vulnerable: |
Ubuntu Ubuntu Linux 12.04 LTS i386 Ubuntu Ubuntu Linux 12.04 LTS amd64 Red Hat Enterprise Linux Workstation 6 Red Hat Enterprise Linux Server 6 Red Hat Enterprise Linux HPC Node 6 Red Hat Enterprise Linux Desktop 6 Gentoo Linux Avaya Aura Experience Portal 6.0 Apple CUPS 1.3.5 |
| Not Vulnerable: | |
Discussion
CUPS CVE-2015-1159 Cross Site Scripting Vulnerability
CUPS is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input.
An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal cookie-based authentication credentials and to launch other attacks.
CUPS is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input.
An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal cookie-based authentication credentials and to launch other attacks.
Exploit / POC
CUPS CVE-2015-1159 Cross Site Scripting Vulnerability
Attackers can exploit this issue by enticing an unsuspecting victim to follow a malicious URI.
Attackers can exploit this issue by enticing an unsuspecting victim to follow a malicious URI.
Solution / Fix
CUPS CVE-2015-1159 Cross Site Scripting Vulnerability
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.