Vulnerability Description
jobs.c in Common Unix Printing System (CUPS) 1.1.14 through 1.1.17 does not properly use the strncat function call when processing the options string, which allows remote attackers to execute arbitrary code via a buffer overflow attack.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Easy Software Products | Cups | 1.0.4 |
| Apple | Mac Os X | 10.2 |
References
- http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0117.html
- http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000702
- http://marc.info/?l=bugtraq&m=104032149026670&w=2
- http://www.debian.org/security/2003/dsa-232
- http://www.idefense.com/advisory/12.19.02.txtExploitVendor Advisory
- http://www.mandrakesoft.com/security/advisories?name=MDKSA-2003:001
- http://www.novell.com/linux/security/advisories/2003_002_cups.html
- http://www.redhat.com/support/errata/RHSA-2002-295.html
- http://www.securityfocus.com/bid/6438
- https://exchange.xforce.ibmcloud.com/vulnerabilities/10910
- http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0117.html
- http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000702
- http://marc.info/?l=bugtraq&m=104032149026670&w=2
- http://www.debian.org/security/2003/dsa-232
- http://www.idefense.com/advisory/12.19.02.txtExploitVendor Advisory
FAQ
What is CVE-2002-1369?
CVE-2002-1369 is a vulnerability with a CVSS score of 10.0 (HIGH). jobs.c in Common Unix Printing System (CUPS) 1.1.14 through 1.1.17 does not properly use the strncat function call when processing the options string, which allows remote attackers to execute arbitrar...
How severe is CVE-2002-1369?
CVE-2002-1369 has been rated HIGH with a CVSS base score of 10.0/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2002-1369?
Check the references section above for vendor advisories and patch information. Affected products include: Easy Software Products Cups, Apple Mac Os X.