RHEL 3 : cups (RHSA-2005:049)

high Nessus Plugin ID 16297

Synopsis

The remote Red Hat host is missing one or more security updates.

Description

Updated CUPS packages that fixes a security issue are now available.

The Common UNIX Printing System provides a portable printing layer for UNIX(R) operating systems.

A buffer overflow flaw was found in the Decrypt::makeFileKey2 function of Xpdf which also affects the CUPS pdftops filter due to a shared codebase. An attacker who has the ability to send a malicious PDF file to a printer could possibly execute arbitrary code as the 'lp' user.
The Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned the name CVE-2005-0064 to this issue.

Red Hat believes that the Exec-Shield technology (enabled by default since Update 3) will block attempts to remotely exploit these buffer overflow vulnerabilities on x86 architectures.

All users of cups should upgrade to these updated packages, which resolve these issues.

Solution

Update the affected cups, cups-devel and / or cups-libs packages.

Plugin Details

Severity: High

ID: 16297

File Name: redhat-RHSA-2005-049.nasl

Version: 1.28

Type: local

Agent: unix

Family: Red Hat Local Security Checks

Published: 2/2/2005

Updated: 1/14/2021

Supported Sensors: Agentless Assessment, Continuous Assessment, Frictionless Assessment Agent, Frictionless Assessment AWS, Frictionless Assessment Azure, Nessus Agent, Nessus

Risk Information

VPR

Risk Factor: Medium

Score: 6.0

CVSS v2

Risk Factor: High

Base Score: 7.5

Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P

Vulnerability Information

CPE: p-cpe:/a:redhat:enterprise_linux:cups-devel, p-cpe:/a:redhat:enterprise_linux:cups-libs, cpe:/o:redhat:enterprise_linux:3, p-cpe:/a:redhat:enterprise_linux:cups

Required KB Items: Host/local_checks_enabled, Host/RedHat/release, Host/RedHat/rpm-list, Host/cpu

Patch Publication Date: 2/1/2005

Vulnerability Publication Date: 5/2/2005

Reference Information

CVE: CVE-2005-0064

RHSA: 2005:049

Detections

Analytics