National Cyber-Alert System

Vulnerability Summary for CVE-2008-0047

Overview

Heap-based buffer overflow in the cgiCompileSearch function in CUPS 1.3.5, and other versions including the version bundled with Apple Mac OS X 10.5.2, when printer sharing is enabled, allows remote attackers to execute arbitrary code via crafted search expressions.

Impact

CVSS Severity (version 2.0):

CVSS Version 2 Metrics:

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving NIST webspace. We have provided these links to other web sites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other web sites that are more appropriate for your purpose. NIST does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, NIST does not endorse any commercial products that may be mentioned on these sites. Please address comments about this page to nvd@nist.gov.

US-CERT Technical Alert: TA08-079A

Name: TA08-079A

Hyperlink:http://www.us-cert.gov/cas/techalerts/TA08-079A.html

External Source: APPLE

Name: APPLE-SA-2008-03-18

Type: Patch Information

Hyperlink:http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html

External Source: FEDORA

Name: FEDORA-2008-2897

Hyperlink:https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00105.html

External Source: FEDORA

Name: FEDORA-2008-2131

Hyperlink:https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00091.html

External Source: UBUNTU

Name: USN-598-1

Hyperlink:http://www.ubuntu.com/usn/usn-598-1

External Source: SECTRACK

Name: 1019646

Hyperlink:http://www.securitytracker.com/id?1019646

External Source: BID

Name: 28307

Hyperlink:http://www.securityfocus.com/bid/28307

External Source: REDHAT

Name: RHSA-2008:0192

Hyperlink:http://www.redhat.com/support/errata/RHSA-2008-0192.html

External Source: MANDRIVA

Name: MDVSA-2008:081

Hyperlink:http://www.mandriva.com/security/advisories?name=MDVSA-2008:081

External Source: VUPEN

Name: ADV-2008-0924

Type: Advisory

Hyperlink:http://www.frsirt.com/english/advisories/2008/0924/references

External Source: VUPEN

Name: ADV-2008-0921

Type: Advisory

Hyperlink:http://www.frsirt.com/english/advisories/2008/0921/references

External Source: DEBIAN

Name: DSA-1530

Hyperlink:http://www.debian.org/security/2008/dsa-1530

External Source: GENTOO

Name: GLSA-200804-01

Hyperlink:http://security.gentoo.org/glsa/glsa-200804-01.xml

External Source: SECUNIA

Name: 29750

Type: Advisory

Hyperlink:http://secunia.com/advisories/29750

External Source: SECUNIA

Name: 29655

Type: Advisory

Hyperlink:http://secunia.com/advisories/29655

External Source: SECUNIA

Name: 29634

Type: Advisory

Hyperlink:http://secunia.com/advisories/29634

External Source: SECUNIA

Name: 29603

Type: Advisory

Hyperlink:http://secunia.com/advisories/29603

External Source: SECUNIA

Name: 29573

Type: Advisory

Hyperlink:http://secunia.com/advisories/29573

External Source: SECUNIA

Name: 29485

Type: Advisory

Hyperlink:http://secunia.com/advisories/29485

External Source: SECUNIA

Name: 29448

Type: Advisory

Hyperlink:http://secunia.com/advisories/29448

External Source: SECUNIA

Name: 29431

Type: Advisory

Hyperlink:http://secunia.com/advisories/29431

External Source: SECUNIA

Name: 29420

Type: Advisory

Hyperlink:http://secunia.com/advisories/29420

External Source: SUSE

Name: SUSE-SA:2008:015

Hyperlink:http://lists.opensuse.org/opensuse-security-announce/2008-03/msg00005.html

External Source: IDEFENSE

Name: 20080318 Multiple Vendor CUPS CGI Heap Overflow Vulnerability

Hyperlink:http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=674

External Source: CONFIRM

Name: http://docs.info.apple.com/article.html?artnum=307562

Hyperlink:http://docs.info.apple.com/article.html?artnum=307562