Vulnerability CVE-2002-1371 - CERT Civis.Net

Vulnerability Name:

CVE-2002-1371 (CCN-10911)

Assigned:

2002-12-19

Published:

2002-12-19

Updated:

2017-10-10

Summary:

filters/image-gif.c in Common Unix Printing System (CUPS) 1.1.14 through 1.1.17 does not properly check for zero-length GIF images, which allows remote attackers to execute arbitrary code via modified chunk headers, as demonstrated by nogif.

CVSS v3 Severity:

7.3 High (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L)

Exploitability Metrics:	Attack Vector (AV): Network Attack Complexity (AC): Low Privileges Required (PR): None User Interaction (UI): None
Scope:	Scope (S): Unchanged
Impact Metrics:	Confidentiality (C): Low Integrity (I): Low Availibility (A): Low

CVSS v2 Severity:

7.5 High (CVSS v2 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P)

Exploitability Metrics:	Access Vector (AV): Network Access Complexity (AC): Low Authentication (Au): None
Impact Metrics:	Confidentiality (C): Partial Integrity (I): Partial Availibility (A): Partial

7.5 High (CCN CVSS v2 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P)

Exploitability Metrics:	Access Vector (AV): Network Access Complexity (AC): Low Athentication (Au): None
Impact Metrics:	Confidentiality (C): Partial Integrity (I): Partial Availibility (A): Partial

Vulnerability Type:

Vulnerability Consequences:

Gain Access

References:

Source: CCN
Type: SCO Security Advisory CSSA-2003-004.0
Multiple Security Vulnerabilities in the Common Unix

Source: VULNWATCH
Type: UNKNOWN
20021219 iDEFENSE Security Advisory 12.19.02: Multiple Security Vulnerabilities in Common Unix Printing System (CUPS)

Source: MITRE
Type: CNA
CVE-2002-1371

Source: CONECTIVA
Type: UNKNOWN
CLSA-2003:702

Source: CCN
Type: Conectiva Linux Security Announcement CLSA-2003:702
cups

Source: CCN
Type: AppleCare Knowledge Base Document 61798
Apple Security Updates

Source: BUGTRAQ
Type: UNKNOWN
20021219 iDEFENSE Security Advisory 12.19.02: Multiple Security Vulnerabilities in Common Unix Printing System (CUPS)

Source: CCN
Type: RHSA-2002-295
Updated CUPS packages fix various vulnerabilities

Source: CCN
Type: CUPS Web site
News - Common UNIX Printing System

Source: DEBIAN
Type: UNKNOWN
DSA-232

Source: DEBIAN
Type: DSA-232
cupsys -- several vulnerabilities

Source: MISC
Type: Exploit, Vendor Advisory
http://www.idefense.com/advisory/12.19.02.txt

Source: MANDRAKE
Type: UNKNOWN
MDKSA-2003:001

Source: SUSE
Type: UNKNOWN
SuSE-SA:2003:002

Source: CCN
Type: OSVDB ID: 10743
CUPS image-gif.c Zero-Length GIF Image Header Arbitrary Code Execution

Source: REDHAT
Type: UNKNOWN
RHSA-2002:295

Source: BID
Type: UNKNOWN
6439

Source: CCN
Type: BID-6439
CUPS Image Filter Zero Width GIF Memory Corruption Vulnerability

Source: XF
Type: UNKNOWN
cups-zero-width-images(10911)

Source: XF
Type: UNKNOWN
cups-zero-width-images(10911)

Source: CCN
Type: iDEFENSE Security Advisory 12.23.02
Multiple Security Vulnerabilities in Common Unix Printing System (CUPS)

Source: SUSE
Type: SUSE-SA:2003:002
cups: local and remote privilege escalation

Vulnerable Configuration:

Configuration 1:

cpe:/a:easy_software_products:cups:1.0.4:*:*:*:*:*:*:*

OR cpe:/a:easy_software_products:cups:1.0.4_8:*:*:*:*:*:*:*

OR cpe:/a:easy_software_products:cups:1.1.1:*:*:*:*:*:*:*

OR cpe:/a:easy_software_products:cups:1.1.4:*:*:*:*:*:*:*

OR cpe:/a:easy_software_products:cups:1.1.4_2:*:*:*:*:*:*:*

OR cpe:/a:easy_software_products:cups:1.1.4_3:*:*:*:*:*:*:*

OR cpe:/a:easy_software_products:cups:1.1.4_5:*:*:*:*:*:*:*

OR cpe:/a:easy_software_products:cups:1.1.6:*:*:*:*:*:*:*

OR cpe:/a:easy_software_products:cups:1.1.7:*:*:*:*:*:*:*

OR cpe:/a:easy_software_products:cups:1.1.10:*:*:*:*:*:*:*

OR cpe:/a:easy_software_products:cups:1.1.13:*:*:*:*:*:*:*

OR cpe:/a:easy_software_products:cups:1.1.14:*:*:*:*:*:*:*

OR cpe:/a:easy_software_products:cups:1.1.17:*:*:*:*:*:*:*

Configuration 2:

cpe:/o:apple:mac_os_x:10.2:*:*:*:*:*:*:*

OR cpe:/o:apple:mac_os_x:10.2.2:*:*:*:*:*:*:*

Configuration CCN 1:

cpe:/o:debian:debian_linux:2.2:*:*:*:*:*:*:*

OR cpe:/o:mandrakesoft:mandrake_linux:7.2:*:*:*:*:*:*:*

OR cpe:/o:suse:suse_linux:7.1:*:*:*:*:*:*:*

OR cpe:/o:mandrakesoft:mandrake_linux:8.0:*:*:*:*:*:*:*

OR cpe:/o:suse:suse_linux:7.2:*:*:*:*:*:*:*

OR cpe:/o:conectiva:linux:7.0:*:*:*:*:*:*:*

OR cpe:/o:mandrakesoft:mandrake_linux:8.1:*:*:*:*:*:*:*

OR cpe:/o:suse:suse_linux:7.3:*:*:*:*:*:*:*

OR cpe:/o:mandrakesoft:mandrake_linux:8.2:*:*:*:*:*:*:*

OR cpe:/o:suse:suse_linux:8.0:*:*:*:*:*:*:*

OR cpe:/o:conectiva:linux:8.0:*:*:*:*:*:*:*

OR cpe:/o:redhat:linux:7.3:*:*:*:*:*:*:*

OR cpe:/o:debian:debian_linux:3.0:*:*:*:*:*:*:*

OR cpe:/o:redhat:linux:8.0:*:*:*:*:*:*:*

OR cpe:/o:mandrakesoft:mandrake_linux:9.0:*:*:*:*:*:*:*

OR cpe:/o:suse:suse_linux:8.1:*:*:*:*:*:*:*

OR cpe:/o:suse:linux_enterprise_server:8:*:*:*:*:*:*:*

OR cpe:/o:conectiva:linux:9.0:*:*:*:*:*:*:*

OR cpe:/o:mandrakesoft:mandrake_linux:8.0:*:ppc:*:*:*:*:*

OR cpe:/o:mandrakesoft:mandrake_linux:8.1:*:ia64:*:*:*:*:*

OR cpe:/o:mandrakesoft:mandrake_linux:8.2:*:ppc:*:*:*:*:*

Denotes that component is vulnerable

Oval Definitions

Definition ID	Class	Title	Last Modified
oval:org.opensuse.security:def:20021371	V	CVE-2002-1371	2015-11-16
oval:org.debian:def:232	V	several vulnerabilities	2003-01-20