Oval Definition:	oval:org.mitre.oval:tst:31989
Comment: cups-devel is earlier than 1:1.1.22-0.rc1.9.8 Type: rpminfo_test Namespace: linux Check_Existence: at_least_one_exists Check: at least one State Operator: AND References Object: oval:org.mitre.oval:obj:14076 State: oval:org.mitre.oval:ste:10106 Referencing Definitions Definition ID Class Title Last Modified oval:org.mitre.oval:def:9774 V The is_path_absolute function in scheduler/client.c for the daemon in CUPS before 1.1.23 allows remote attackers to cause a denial of service (CPU consumption by tight loop) via a "..\.." URL in an HTTP request. 2013-04-29
BACK