Buffer overflow in CUPS in Apple Mac OS X 10.4.11 allows local admin users to execute arbitrary code via a crafted URI to the CUPS service.

This update fixes a buffer overflow that can be exploited by users that are allowed to configure CUPS. (CVE-2007-5848)

This update fixes a buffer overflow that can be exploited by users that are allowed to configure CUPS. (CVE-2007-5848) Additionally a buffer overflow in the SNMP backend of CUPS was fixed that allowed remote attackers to execute arbitrary code by sending specially crafted SNMP responses. (CVE-2007-5849) This vulnerability affects 10.2 and 10.3 only.

The remote host is running a version of Mac OS X 10.5 or 10.4 that does not have Security Update 2007-009 applied. 

This update contains several security fixes for a large number of programs.

ID	Name	Product	Family	Severity
41175	SuSE9 Security Update : cups (YOU Patch Number 12016)	Nessus	SuSE Local Security Checks	high
29914	openSUSE 10 Security Update : cups (cups-4806)	Nessus	SuSE Local Security Checks	high
29913	SuSE 10 Security Update : cups (ZYPP Patch Number 4805)	Nessus	SuSE Local Security Checks	high
29723	Mac OS X Multiple Vulnerabilities (Security Update 2007-009)	Nessus	MacOS X Local Security Checks	critical

Detections

Analytics

CVE-2007-5848

high

Tenable Plugins

high

high

high

critical