Detections
Analytics
Debian DSA-1656-1 : cupsys - several vulnerabilities
critical Nessus Plugin ID 34449
Synopsis
The remote Debian host is missing a security-related update.Description
Several local vulnerabilities have been discovered in the Common UNIX Printing System. The Common Vulnerabilities and Exposures project identifies the following problems :- CVE-2008-3639 It was discovered that insufficient bounds checking in the SGI image filter may lead to the execution of arbitrary code.
- CVE-2008-3640 It was discovered that an integer overflow in the Postscript conversion tool 'texttops' may lead to the execution of arbitrary code.
- CVE-2008-3641 It was discovered that insufficient bounds checking in the HPGL filter may lead to the execution of arbitrary code.
Solution
Upgrade the cupsys package.For the stable distribution (etch), these problems have been fixed in version 1.2.7-4etch5.
See Also
https://security-tracker.debian.org/tracker/CVE-2008-3639
https://security-tracker.debian.org/tracker/CVE-2008-3640
Plugin Details
Severity: Critical
ID: 34449
File Name: debian_DSA-1656.nasl
Version: 1.17
Type: local
Agent: unix
Family: Debian Local Security Checks
Published: 10/21/2008
Updated: 1/4/2021
Supported Sensors: Agentless Assessment, Continuous Assessment, Frictionless Assessment Agent, Nessus Agent, Nessus
Risk Information
VPR
Risk Factor: High
Score: 7.4
CVSS v2
Risk Factor: Critical
Base Score: 10
Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C
Vulnerability Information
CPE: cpe:/o:debian:debian_linux:4.0, p-cpe:/a:debian:debian_linux:cupsys
Required KB Items: Host/local_checks_enabled, Host/Debian/release, Host/Debian/dpkg-l
Exploit Available: true
Exploit Ease: Exploits are available
Patch Publication Date: 10/20/2008
Exploitable With
Core Impact