Oval Definition:	oval:org.mitre.oval:def:9631
Revision Date: 2013-04-29 Version: 12 Title: The ippReadIO function in cups/ipp.c in cupsd in CUPS before 1.3.10 does not properly initialize memory for IPP request packets, which allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a scheduler request with two consecutive IPP_TAG_UNSUPPORTED tags. Description: The ippReadIO function in cups/ipp.c in cupsd in CUPS before 1.3.10 does not properly initialize memory for IPP request packets, which allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a scheduler request with two consecutive IPP_TAG_UNSUPPORTED tags. Family: unix Class: vulnerability Status: ACCEPTED Reference(s): CVE-2009-0949 Platform(s): CentOS Linux 3 CentOS Linux 4 CentOS Linux 5 Oracle Linux 4 Oracle Linux 5 Red Hat Enterprise Linux 3 Red Hat Enterprise Linux 4 Red Hat Enterprise Linux 5 Product(s): Definition Synopsis OS Section: RHEL3, CentOS3 RHEL3 or CentOS3 The operating system installed on the system is Red Hat Enterprise Linux 3 OR CentOS Linux 3.x AND Configuration section cups-devel is earlier than 1:1.1.17-13.3.62 OR cups is earlier than 1:1.1.17-13.3.62 OR cups-libs is earlier than 1:1.1.17-13.3.62 OR OS Section: RHEL4, CentOS4, Oracle Linux 4 RHEL4, CentOS4 or Oracle Linux 4 The operating system installed on the system is Red Hat Enterprise Linux 4 OR CentOS Linux 4.x OR Oracle Linux 4.x AND Configuration section cups-devel is earlier than 1:1.1.22-0.rc1.9.32.el4_8.3 OR cups is earlier than 1:1.1.22-0.rc1.9.32.el4_8.3 OR cups-libs is earlier than 1:1.1.22-0.rc1.9.32.el4_8.3 OR OS Section: RHEL5, CentOS5, Oracle Linux 5 RHEL5, CentOS5 or Oracle Linux 5 The operating system installed on the system is Red Hat Enterprise Linux 5 OR The operating system installed on the system is CentOS Linux 5.x OR Oracle Linux 5.x AND Configuration section cups-lpd is earlier than 1:1.3.7-8.el5_3.6 OR cups-devel is earlier than 1:1.3.7-8.el5_3.6 OR cups is earlier than 1:1.3.7-8.el5_3.6 OR cups-libs is earlier than 1:1.3.7-8.el5_3.6
BACK