Detections
Analytics
Debian DSA-1625-1 : cupsys - buffer overflows
critical Nessus Plugin ID 33774
Synopsis
The remote Debian host is missing a security-related update.Description
Several remote vulnerabilities have been discovered in the Common Unix Printing System (CUPS). The Common Vulnerabilities and Exposures project identifies the following problems :- CVE-2008-0053 Buffer overflows in the HP-GL input filter allowed to possibly run arbitrary code through crafted HP-GL files.
- CVE-2008-1373 Buffer overflow in the GIF filter allowed to possibly run arbitrary code through crafted GIF files.
- CVE-2008-1722 Integer overflows in the PNG filter allowed to possibly run arbitrary code through crafted PNG files.
Solution
Upgrade the cupsys package.For the stable distribution (etch), these problems have been fixed in version 1.2.7-4etch4 of package cupsys.
See Also
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=476305
https://security-tracker.debian.org/tracker/CVE-2008-0053
https://security-tracker.debian.org/tracker/CVE-2008-1373
Plugin Details
Severity: Critical
ID: 33774
File Name: debian_DSA-1625.nasl
Version: 1.16
Type: local
Agent: unix
Family: Debian Local Security Checks
Published: 8/1/2008
Updated: 1/4/2021
Supported Sensors: Frictionless Assessment Agent, Nessus Agent, Agentless Assessment, Nessus
Risk Information
VPR
Risk Factor: Medium
Score: 6.6
CVSS v2
Risk Factor: Critical
Base Score: 10
Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C
Vulnerability Information
CPE: p-cpe:/a:debian:debian_linux:cupsys, cpe:/o:debian:debian_linux:4.0
Required KB Items: Host/local_checks_enabled, Host/Debian/release, Host/Debian/dpkg-l
Patch Publication Date: 8/1/2008