Vulnetix
Try Vulnetix Request Demo
CVE-2010-2432 PUBLISHED CVSS 5 MEDIUM

The cupsDoAuthentication function in auth.c in the client in CUPS before 1.4.4, when HAVE_GSSAPI is omitted, does not properly handle a demand for authorization, which allows remote CUPS servers to cause a denial of service (infinite loop) via HTTP_UNAUTHORIZED responses.

EPSS 0.83% · 74.4th percentile

Risk Scores

CVSS v2.0
5
EPSS Score
0.83%
74.4th percentile

Affected Products

VendorProductVersions
applecups1.4.2, 0, 1.1
n/an/an/a

Timeline

References

Open in Interactive Console →