Vulnerability CVE-2002-1383 - CERT Civis.Net

Vulnerability Name:

CVE-2002-1383 (CCN-10906)

Assigned:

2002-12-19

Published:

2002-12-19

Updated:

2016-10-18

Summary:

Multiple integer overflows in Common Unix Printing System (CUPS) 1.1.14 through 1.1.17 allow remote attackers to execute arbitrary code via (1) the CUPSd HTTP interface, as demonstrated by vanilla-coke, and (2) the image handling code in CUPS filters, as demonstrated by mksun.

CVSS v3 Severity:

10.0 Critical (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H)

Exploitability Metrics:	Attack Vector (AV): Network Attack Complexity (AC): Low Privileges Required (PR): None User Interaction (UI): None
Scope:	Scope (S): Changed
Impact Metrics:	Confidentiality (C): High Integrity (I): High Availibility (A): High

CVSS v2 Severity:

10.0 High (CVSS v2 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C)

Exploitability Metrics:	Access Vector (AV): Network Access Complexity (AC): Low Authentication (Au): None
Impact Metrics:	Confidentiality (C): Complete Integrity (I): Complete Availibility (A): Complete

10.0 High (CCN CVSS v2 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C)

Exploitability Metrics:	Access Vector (AV): Network Access Complexity (AC): Low Athentication (Au): None
Impact Metrics:	Confidentiality (C): Complete Integrity (I): Complete Availibility (A): Complete

Vulnerability Type:

Vulnerability Consequences:

Gain Access

References:

Source: CALDERA
Type: UNKNOWN
CSSA-2003-004.0

Source: CCN
Type: SCO Security Advisory CSSA-2003-004.0
Multiple Security Vulnerabilities in the Common Unix

Source: VULNWATCH
Type: UNKNOWN
20021219 iDEFENSE Security Advisory 12.19.02: Multiple Security Vulnerabilities in Common Unix Printing System (CUPS)

Source: MITRE
Type: CNA
CVE-2002-1383

Source: CCN
Type: Conectiva Linux Security Announcement CLSA-2003:702
cups

Source: CCN
Type: AppleCare Knowledge Base Document 61798
Apple Security Updates

Source: BUGTRAQ
Type: UNKNOWN
20021219 iDEFENSE Security Advisory 12.19.02: Multiple Security Vulnerabilities in Common Unix Printing System (CUPS)

Source: CCN
Type: RHSA-2002-295
Updated CUPS packages fix various vulnerabilities

Source: CCN
Type: SA7756
CUPS multiple vulnerabilities

Source: SECUNIA
Type: UNKNOWN
7756

Source: CCN
Type: SA7794
Gentoo updates to CUPS

Source: SECUNIA
Type: UNKNOWN
7794

Source: CCN
Type: SA7803
SuSE updates to CUPS

Source: SECUNIA
Type: UNKNOWN
7803

Source: CCN
Type: SA7843
Mandrake updates to CUPS

Source: SECUNIA
Type: UNKNOWN
7843

Source: CCN
Type: SA7858
RedHat updates to CUPS

Source: SECUNIA
Type: UNKNOWN
7858

Source: CCN
Type: SA7907
Debian updates to cupsys

Source: SECUNIA
Type: UNKNOWN
7907

Source: CCN
Type: SA7913
OpenLinux updates to CUPS

Source: SECUNIA
Type: UNKNOWN
7913

Source: SECUNIA
Type: UNKNOWN
8080

Source: SECUNIA
Type: UNKNOWN
9325

Source: CCN
Type: CUPS Web site
News - Common UNIX Printing System

Source: DEBIAN
Type: DSA-232
cupsys -- several vulnerabilities

Source: MISC
Type: Exploit, Vendor Advisory
http://www.idefense.com/advisory/12.19.02.txt

Source: SUSE
Type: UNKNOWN
SuSE-SA:2003:002

Source: CCN
Type: OSVDB ID: 10745
CUPS HTTP Interface Remote Overflow

Source: CCN
Type: OSVDB ID: 10746
CUPS Image Handler Remote Overflow

Source: REDHAT
Type: Patch, Vendor Advisory
RHSA-2002:295

Source: CCN
Type: BID-6433
CUPS HTTP Interface Integer Overflow Vulnerability

Source: CCN
Type: BID-6434
CUPS lp Image Handler Integer Overflow Vulnerabilities

Source: XF
Type: UNKNOWN
cups-multiple-int-overflow(10906)

Source: CCN
Type: iDEFENSE Security Advisory 12.23.02
Multiple Security Vulnerabilities in Common Unix Printing System (CUPS)

Source: SUSE
Type: SUSE-SA:2003:002
cups: local and remote privilege escalation

Vulnerable Configuration:

Configuration 1:

cpe:/a:easy_software_products:cups:1.0.4:*:*:*:*:*:*:*

OR cpe:/a:easy_software_products:cups:1.0.4_8:*:*:*:*:*:*:*

OR cpe:/a:easy_software_products:cups:1.1.1:*:*:*:*:*:*:*

OR cpe:/a:easy_software_products:cups:1.1.4:*:*:*:*:*:*:*

OR cpe:/a:easy_software_products:cups:1.1.4_2:*:*:*:*:*:*:*

OR cpe:/a:easy_software_products:cups:1.1.4_3:*:*:*:*:*:*:*

OR cpe:/a:easy_software_products:cups:1.1.4_5:*:*:*:*:*:*:*

OR cpe:/a:easy_software_products:cups:1.1.6:*:*:*:*:*:*:*

OR cpe:/a:easy_software_products:cups:1.1.7:*:*:*:*:*:*:*

OR cpe:/a:easy_software_products:cups:1.1.10:*:*:*:*:*:*:*

OR cpe:/a:easy_software_products:cups:1.1.13:*:*:*:*:*:*:*

OR cpe:/a:easy_software_products:cups:1.1.14:*:*:*:*:*:*:*

OR cpe:/a:easy_software_products:cups:1.1.17:*:*:*:*:*:*:*

Configuration 2:

cpe:/o:apple:mac_os_x:10.2:*:*:*:*:*:*:*

OR cpe:/o:apple:mac_os_x:10.2.2:*:*:*:*:*:*:*

Configuration CCN 1:

cpe:/o:debian:debian_linux:2.2:*:*:*:*:*:*:*

OR cpe:/o:mandrakesoft:mandrake_linux:7.2:*:*:*:*:*:*:*

OR cpe:/o:suse:suse_linux:7.1:*:*:*:*:*:*:*

OR cpe:/o:mandrakesoft:mandrake_linux:8.0:*:*:*:*:*:*:*

OR cpe:/o:suse:suse_linux:7.2:*:*:*:*:*:*:*

OR cpe:/o:conectiva:linux:7.0:*:*:*:*:*:*:*

OR cpe:/o:mandrakesoft:mandrake_linux:8.1:*:*:*:*:*:*:*

OR cpe:/o:debian:debian_linux:2.0:*:*:*:*:*:*:*

OR cpe:/o:suse:suse_linux:7.3:*:*:*:*:*:*:*

OR cpe:/a:suse:suse_email_server:iii:*:*:*:*:*:*:*

OR cpe:/o:mandrakesoft:mandrake_linux:8.2:*:*:*:*:*:*:*

OR cpe:/o:suse:suse_linux:8.0:*:*:*:*:*:*:*

OR cpe:/o:conectiva:linux:8.0:*:*:*:*:*:*:*

OR cpe:/o:redhat:linux:7.3:*:*:*:*:*:*:*

OR cpe:/o:debian:debian_linux:3.0:*:*:*:*:*:*:*

OR cpe:/o:redhat:linux:8.0:*:*:*:*:*:*:*

OR cpe:/o:mandrakesoft:mandrake_linux:9.0:*:*:*:*:*:*:*

OR cpe:/o:suse:suse_linux:8.1:*:*:*:*:*:*:*

OR cpe:/o:suse:linux_enterprise_server:8:*:*:*:*:*:*:*

OR cpe:/o:conectiva:linux:9.0:*:*:*:*:*:*:*

OR cpe:/o:mandrakesoft:mandrake_linux:8.0:*:ppc:*:*:*:*:*

OR cpe:/o:mandrakesoft:mandrake_linux:8.1:*:ia64:*:*:*:*:*

OR cpe:/o:mandrakesoft:mandrake_linux:8.2:*:ppc:*:*:*:*:*

Denotes that component is vulnerable

Oval Definitions

Definition ID	Class	Title	Last Modified
oval:org.opensuse.security:def:20021383	V	CVE-2002-1383	2015-11-16
oval:org.debian:def:232	V	several vulnerabilities	2003-01-20