VDB
CVE-2002-1367
CVE-2002-1367
PUBLISHED
Reported by mitre · Published September 1, 2004
Common Unix Printing System (CUPS) 1.1.14 through 1.1.17 allows remote attackers to add printers without authentication via a certain UDP packet, which can then be used to perform unauthorized activities such as stealing the local root certificate for the administration server via a "need authorization" page, as demonstrated by new-coke.
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| n/a | n/a | n/a |
| n/a | n/a | n/a, n/a, * |
Timeline
- Dec 26, 2002 CVE Published
- Feb 4, 2022 EPSS Score
- Mar 29, 2022 EPSS Score
- Apr 30, 2022 CVE Updated
- May 21, 2022 EPSS Score
- Sep 5, 2022 EPSS Score
- Oct 28, 2022 EPSS Score
- Dec 20, 2022 EPSS Score
- Feb 11, 2023 EPSS Score
- Apr 4, 2023 EPSS Score
- May 27, 2023 EPSS Score
- Jul 19, 2023 EPSS Score
References
- 20021219 iDEFENSE Security Advisory 12.19.02: Multiple Security Vulnerabilities in Common Unix Printing System (CUPS) mailing-listx_refsource_VULNWATCH
- CLSA-2003:702 vendor-advisoryx_refsource_CONECTIVA
- DSA-232 vendor-advisoryx_refsource_DEBIAN
- SuSE-SA:2003:002 vendor-advisoryx_refsource_SUSE
- x_refsource_MISC
- RHSA-2002:295 vendor-advisoryx_refsource_REDHAT
- 20021219 iDEFENSE Security Advisory 12.19.02: Multiple Security Vulnerabilities in Common Unix Printing System (CUPS) mailing-listx_refsource_BUGTRAQ
- MDKSA-2003:001 vendor-advisoryx_refsource_MANDRAKE
- 6436 vdb-entryx_refsource_BID
- cups-udp-add-printers(10908) vdb-entryx_refsource_XF