Cups Internet Printing Protocol Job循环拒绝服务漏洞发布时间：2003-11-04 更新时间：2003-11-04 严重程度：中 威胁程度：远程拒绝服务 错误类型：意外情况处置错误 利用方式：服务器模式 BUGTRAQ ID：8952 CVE(CAN) ID：CAN-2003-0788 受影响系统 Easy Software Products CUPS 1.0.4 -8未影响系统 Easy Software Products CUPS 1.1.19详细描述 CUPS协议实现上存在漏洞，提交恶意作业到IPP端口631，可导致拒绝服务攻击，没有详细资料提供。 解决方案 补丁下载： Easy Software Products CUPS 1.1.10: Conectiva Upgrade cups-drivers-1.0-3U70_1cl.i386.rpm ftp://atualizacoes.conectiva.com.br/7.0/RPMS/cups-drivers-1.0-3U70_1cl.i386.rpm Update for Conectiva Linux 7.0. Conectiva Upgrade cups-1.1.14-1U70_5cl.i386.rpm ftp://atualizacoes.conectiva.com.br/7.0/RPMS/cups-1.1.14-1U70_5cl.i386.rpm Update for Conectiva Linux 7.0. Conectiva Upgrade cups-devel-1.1.14-1U70_5cl.i386.rpm ftp://atualizacoes.conectiva.com.br/7.0/RPMS/cups-devel-1.1.14-1U70_5cl.i386.rpm Update for Conectiva Linux 7.0. Conectiva Upgrade cups-doc-1.1.14-1U70_5cl.i386.rpm ftp://atualizacoes.conectiva.com.br/7.0/RPMS/cups-doc-1.1.14-1U70_5cl.i386.rpm Update for Conectiva Linux 7.0. Conectiva Upgrade cups-libs-1.1.14-1U70_5cl.i386.rpm ftp://atualizacoes.conectiva.com.br/7.0/RPMS/cups-libs-1.1.14-1U70_5cl.i386.rpm Update for Conectiva Linux 7.0. Conectiva Upgrade cups-devel-static-1.1.14-1U70_5cl.i386.rpm ftp://atualizacoes.conectiva.com.br/7.0/RPMS/cups-devel-static-1.1.14-1U70_5cl.i386.rpm Update for Conectiva Linux 7.0. Easy Software Products CUPS 1.1.14: Conectiva Upgrade cups-1.1.14-2U80_5cl.i386.rpm ftp://atualizacoes.conectiva.com.br/8/RPMS/cups-1.1.14-2U80_5cl.i386.rpm Update for Conectiva Linux 8.0. Conectiva Upgrade cups-devel-1.1.14-2U80_5cl.i386.rpm ftp://atualizacoes.conectiva.com.br/8/RPMS/cups-devel-1.1.14-2U80_5cl.i386.rpm Update for Conectiva Linux 8.0. Conectiva Upgrade cups-devel-static-1.1.14-2U80_5cl.i386.rpm ftp://atualizacoes.conectiva.com.br/8/RPMS/cups-devel-static-1.1.14-2U80_5cl.i386.rpm Update for Conectiva Linux 8.0. Conectiva Upgrade cups-doc-1.1.14-2U80_5cl.i386.rpm ftp://atualizacoes.conectiva.com.br/8/RPMS/cups-doc-1.1.14-2U80_5cl.i386.rpm Update for Conectiva Linux 8.0. Conectiva Upgrade cups-libs-1.1.14-2U80_5cl.i386.rpm ftp://atualizacoes.conectiva.com.br/8/RPMS/cups-libs-1.1.14-2U80_5cl.i386.rpm Update for Conectiva Linux 8.0. Easy Software Products CUPS 1.1.15: Conectiva Upgrade cups-1.1.15-132.i586.rpm ftp://ul.conectiva.com.br/updates/1.0/RPMS.core/cups-1.1.15-132.i586.rpm Conectiva Upgrade cups-client-1.1.15-132.i586.rpm ftp://ul.conectiva.com.br/updates/1.0/RPMS.core/cups-client-1.1.15-132.i586.rpm Conectiva Upgrade cups-devel-1.1.15-132.i586.rpm ftp://ul.conectiva.com.br/updates/1.0/RPMS.core/cups-devel-1.1.15-132.i586.rpm Conectiva Upgrade cups-libs-1.1.15-132.i586.rpm ftp://ul.conectiva.com.br/updates/1.0/RPMS.core/cups-libs-1.1.15-132.i586.rpm Easy Software Products CUPS 1.1.18: Mandrake Upgrade cups-1.1.18-2.2.C21mdk.i586.rpm http://www.mandrakesecure.net/en/ftp.php Mandrake Corporate Server 2.1. Mandrake Upgrade cups-common-1.1.18-2.2.C21mdk.i586.rpm http://www.mandrakesecure.net/en/ftp.php Mandrake Corporate Server 2.1. Mandrake Upgrade cups-serial-1.1.18-2.2.C21mdk.i586.rpm http://www.mandrakesecure.net/en/ftp.php Mandrake Corporate Server 2.1. Mandrake Upgrade libcups1-1.1.18-2.2.C21mdk.i586.rpm http://www.mandrakesecure.net/en/ftp.php Mandrake Corporate Server 2.1. Mandrake Upgrade libcups1-devel-1.1.18-2.2.C21mdk.i586.rpm http://www.mandrakesecure.net/en/ftp.php Mandrake Corporate Server 2.1. Mandrake Upgrade cups-1.1.18-2.2.C21mdk.x86_64.rpm http://www.mandrakesecure.net/en/ftp.php Mandrake Corporate Server 2.1/x86_64. Mandrake Upgrade cups-common-1.1.18-2.2.C21mdk.x86_64.rpm http://www.mandrakesecure.net/en/ftp.php Mandrake Corporate Server 2.1/x86_64. Mandrake Upgrade cups-serial-1.1.18-2.2.C21mdk.x86_64.rpm http://www.mandrakesecure.net/en/ftp.php Mandrake Corporate Server 2.1/x86_64. Mandrake Upgrade libcups1-1.1.18-2.2.C21mdk.x86_64.rpm http://www.mandrakesecure.net/en/ftp.php Mandrake Corporate Server 2.1/x86_64. Mandrake Upgrade libcups1-devel-1.1.18-2.2.C21mdk.x86_64.rpm http://www.mandrakesecure.net/en/ftp.php Mandrake Corporate Server 2.1/x86_64. Mandrake Upgrade cups-1.1.18-2.2.90mdk.i586.rpm http://www.mandrakesecure.net/en/ftp.php Mandrake Linux 9.0. Mandrake Upgrade cups-common-1.1.18-2.2.90mdk.i586.rpm http://www.mandrakesecure.net/en/ftp.php Mandrake Linux 9.0. Mandrake Upgrade cups-serial-1.1.18-2.2.90mdk.i586.rpm http://www.mandrakesecure.net/en/ftp.php Mandrake Linux 9.0. Mandrake Upgrade libcups1-1.1.18-2.2.90mdk.i586.rpm http://www.mandrakesecure.net/en/ftp.php Mandrake Linux 9.0. Mandrake Upgrade libcups1-devel-1.1.18-2.2.90mdk.i586.rpm http://www.mandrakesecure.net/en/ftp.php Mandrake Linux 9.0. Conectiva Upgrade cups-1.1.18-29091U90_2cl.i386.rpm ftp://atualizacoes.conectiva.com.br/9/RPMS/cups-1.1.18-29091U90_2cl.i386.rpm Update for Conectiva Linux 9.0. Conectiva Upgrade cups-devel-1.1.18-29091U90_2cl.i386.rpm ftp://atualizacoes.conectiva.com.br/9/RPMS/cups-devel-1.1.18-29091U90_2cl.i386.rpm Update for Conectiva Linux 9.0. Conectiva Upgrade cups-devel-static-1.1.18-29091U90_2cl.i386.rpm ftp://atualizacoes.conectiva.com.br/9/RPMS/cups-devel-static-1.1.18-29091U90_2cl.i386.rpm Update for Conectiva Linux 9.0. Conectiva Upgrade cups-doc-1.1.18-29091U90_2cl.i386.rpm ftp://atualizacoes.conectiva.com.br/9/RPMS/cups-doc-1.1.18-29091U90_2cl.i386.rpm Update for Conectiva Linux 9.0. Conectiva Upgrade cups-libs-1.1.18-29091U90_2cl.i386.rpm ftp://atualizacoes.conectiva.com.br/9/RPMS/cups-libs-1.1.18-29091U90_2cl.i386.rpm Update for Conectiva Linux 9.0. TurboLinux TurboLinux 8.0 Workstation: TurboLinux Upgrade cups-1.1.19-11.i586.rpm ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Workstation/8/updates/RPMS/cups-1.1.19-11.i586.rpm TurboLinux Upgrade cups-devel-1.1.19-11.i586.rpm ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Workstation/8/updates/RPMS/cups-devel-1.1.19-11.i586.rpm TurboLinux Upgrade cups-libs-1.1.19-11.i586.rpm ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Workstation/8/updates/RPMS/cups-libs-1.1.19-11.i586.rpm TurboLinux TurboLinux 8.0 Server: TurboLinux Upgrade cups-1.1.19-11.i586.rpm ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Server/8/updates/RPMS/cups-1.1.19-11.i586.rpm TurboLinux Upgrade cups-devel-1.1.19-11.i586.rpm ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Server/8/updates/RPMS/cups-devel-1.1.19-11.i586.rpm TurboLinux Upgrade cups-libs-1.1.19-11.i586.rpm ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Server/8/updates/RPMS/cups-libs-1.1.19-11.i586.rpm 相关信息 Paul Mitcheson 参考：http://www.securityfocus.com/advisories/6015 http://www.securityfocus.com/advisories/6035 http://www.securityfocus.com/advisories/6031 http://www.securityfocus.com/advisories/6111 |
