CVE-2008-5183

Description

cupsd in CUPS 1.3.9 and earlier allows local users, and possibly remote attackers, to cause a denial of service (daemon crash) by adding a large number of RSS Subscriptions, which triggers a NULL pointer dereference. NOTE: this issue can be triggered remotely by leveraging CVE-2008-5184.

References

https://www.exploit-db.com/exploits/7150

https://exchange.xforce.ibmcloud.com/vulnerabilities/46684

https://bugs.launchpad.net/ubuntu/+source/cups/+bug/298241

http://www.openwall.com/lists/oss-security/2008/11/20/1

http://www.openwall.com/lists/oss-security/2008/11/19/4

http://www.openwall.com/lists/oss-security/2008/11/19/3

http://www.debian.org/security/2011/dsa-2176

http://support.apple.com/kb/HT3438

http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00002.html

http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3