Common Unix Printing System (CUPS) 1.1.14 through 1.1.17 allows remote attackers to add printers without authentication via a certain UDP packet, which can then be used to perform unauthorized activities such as stealing the local root certificate for the administration server via a "need authorization" page, as demonstrated by new-coke.
| Type | CWE ID | Description |
|---|---|---|
| text | N/A | n/a |
| Version | Base score | Base severity | Vector |
|---|
| CAPEC ID | Description |
|---|
| Event | Date |
|---|
| Hyperlink | Resource |
|---|---|
| http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0117.html | mailing-list x_refsource_VULNWATCH |
| http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000702 | vendor-advisory x_refsource_CONECTIVA |
| http://www.debian.org/security/2003/dsa-232 | vendor-advisory x_refsource_DEBIAN |
| http://www.novell.com/linux/security/advisories/2003_002_cups.html | vendor-advisory x_refsource_SUSE |
| http://www.idefense.com/advisory/12.19.02.txt | x_refsource_MISC |
| http://www.redhat.com/support/errata/RHSA-2002-295.html | vendor-advisory x_refsource_REDHAT |
| http://marc.info/?l=bugtraq&m=104032149026670&w=2 | mailing-list x_refsource_BUGTRAQ |
| http://www.mandrakesoft.com/security/advisories?name=MDKSA-2003:001 | vendor-advisory x_refsource_MANDRAKE |
| http://www.securityfocus.com/bid/6436 | vdb-entry x_refsource_BID |
| https://exchange.xforce.ibmcloud.com/vulnerabilities/10908 | vdb-entry x_refsource_XF |
| Version | Base score | Base severity | Vector |
|---|
| CAPEC ID | Description |
|---|
| Event | Date |
|---|
| Hyperlink | Resource |
|---|---|
| http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0117.html | mailing-list x_refsource_VULNWATCH x_transferred |
| http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000702 | vendor-advisory x_refsource_CONECTIVA x_transferred |
| http://www.debian.org/security/2003/dsa-232 | vendor-advisory x_refsource_DEBIAN x_transferred |
| http://www.novell.com/linux/security/advisories/2003_002_cups.html | vendor-advisory x_refsource_SUSE x_transferred |
| http://www.idefense.com/advisory/12.19.02.txt | x_refsource_MISC x_transferred |
| http://www.redhat.com/support/errata/RHSA-2002-295.html | vendor-advisory x_refsource_REDHAT x_transferred |
| http://marc.info/?l=bugtraq&m=104032149026670&w=2 | mailing-list x_refsource_BUGTRAQ x_transferred |
| http://www.mandrakesoft.com/security/advisories?name=MDKSA-2003:001 | vendor-advisory x_refsource_MANDRAKE x_transferred |
| http://www.securityfocus.com/bid/6436 | vdb-entry x_refsource_BID x_transferred |
| https://exchange.xforce.ibmcloud.com/vulnerabilities/10908 | vdb-entry x_refsource_XF x_transferred |