• info
• discussion
• exploit
• solution
• references

Common Unix Printing System Attribute Name Buffer Overflow Vulnerability

Solution:
Fixes available:


Easy Software Products CUPS 1.0.4

• Conectiva cups-devel-static-1.1.6-7cl.i386.rpm
  ftp://atualizacoes.conectiva.com.br/6.0/RPMS/cups-devel-static-1.1.6-7 cl.i386.rpm


• Debian cupsys-bsd_1.0.4-10_alpha.deb
  http://security.debian.org/dists/stable/updates/main/binary-alpha/cups ys-bsd_1.0.4-10_alpha.deb


• Debian cupsys-bsd_1.0.4-10_arm.deb
  http://security.debian.org/dists/stable/updates/main/binary-arm/cupsys -bsd_1.0.4-10_arm.deb


• Debian cupsys-bsd_1.0.4-10_i386.deb
  http://security.debian.org/dists/stable/updates/main/binary-i386/cupsy s-bsd_1.0.4-10_i386.deb


• Debian cupsys-bsd_1.0.4-10_m68k.deb
  http://security.debian.org/dists/stable/updates/main/binary-m68k/cupsy s-bsd_1.0.4-10_m68k.deb


• Debian cupsys-bsd_1.0.4-10_powerpc.deb
  http://security.debian.org/dists/stable/updates/main/binary-powerpc/cu psys-bsd_1.0.4-10_powerpc.deb


• Debian cupsys-bsd_1.0.4-10_sparc.deb
  http://security.debian.org/dists/stable/updates/main/binary-sparc/cups ys-bsd_1.0.4-10_sparc.deb


• Debian cupsys_1.0.4-10_alpha.deb
  http://security.debian.org/dists/stable/updates/main/binary-alpha/cups ys_1.0.4-10_alpha.deb


• Debian cupsys_1.0.4-10_arm.deb
  http://security.debian.org/dists/stable/updates/main/binary-arm/cupsys _1.0.4-10_arm.deb


• Debian cupsys_1.0.4-10_i386.deb
  http://security.debian.org/dists/stable/updates/main/binary-i386/cupsy s_1.0.4-10_i386.deb


• Debian cupsys_1.0.4-10_m68k.deb
  http://security.debian.org/dists/stable/updates/main/binary-m68k/cupsy s_1.0.4-10_m68k.deb


• Debian cupsys_1.0.4-10_powerpc.deb
  http://security.debian.org/dists/stable/updates/main/binary-powerpc/cu psys_1.0.4-10_powerpc.deb


• Debian cupsys_1.0.4-10_sparc.deb
  http://security.debian.org/dists/stable/updates/main/binary-sparc/cups ys_1.0.4-10_sparc.deb


• Debian libcupsys1-dev_1.0.4-10_alpha.deb
  http://security.debian.org/dists/stable/updates/main/binary-alpha/libc upsys1-dev_1.0.4-10_alpha.deb


• Debian libcupsys1-dev_1.0.4-10_arm.deb
  http://security.debian.org/dists/stable/updates/main/binary-arm/libcup sys1-dev_1.0.4-10_arm.deb


• Debian libcupsys1-dev_1.0.4-10_i386.deb
  http://security.debian.org/dists/stable/updates/main/binary-i386/libcu psys1-dev_1.0.4-10_i386.deb


• Debian libcupsys1-dev_1.0.4-10_m68k.deb
  http://security.debian.org/dists/stable/updates/main/binary-m68k/libcu psys1-dev_1.0.4-10_m68k.deb


• Debian libcupsys1-dev_1.0.4-10_powerpc.deb
  http://security.debian.org/dists/stable/updates/main/binary-powerpc/li bcupsys1-dev_1.0.4-10_powerpc.deb


• Debian libcupsys1-dev_1.0.4-10_sparc.deb
  http://security.debian.org/dists/stable/updates/main/binary-sparc/libc upsys1-dev_1.0.4-10_sparc.deb


• Debian libcupsys1_1.0.4-10_alpha.deb
  http://security.debian.org/dists/stable/updates/main/binary-alpha/libc upsys1_1.0.4-10_alpha.deb


• Debian libcupsys1_1.0.4-10_arm.deb
  http://security.debian.org/dists/stable/updates/main/binary-arm/libcup sys1_1.0.4-10_arm.deb


• Debian libcupsys1_1.0.4-10_i386.deb
  http://security.debian.org/dists/stable/updates/main/binary-i386/libcu psys1_1.0.4-10_i386.deb


• Debian libcupsys1_1.0.4-10_m68k.deb
  http://security.debian.org/dists/stable/updates/main/binary-m68k/libcu psys1_1.0.4-10_m68k.deb


• Debian libcupsys1_1.0.4-10_powerpc.deb
  http://security.debian.org/dists/stable/updates/main/binary-powerpc/li bcupsys1_1.0.4-10_powerpc.deb


• Debian libcupsys1_1.0.4-10_sparc.deb
  http://security.debian.org/dists/stable/updates/main/binary-sparc/libc upsys1_1.0.4-10_sparc.deb

Easy Software Products CUPS 1.1.1

• Red Hat cups-1.1.14-5.alpha.rpm
  ftp://updates.redhat.com/7.0/en/powertools/alpha/cups-1.1.14-5.alpha.r pm


• Red Hat cups-1.1.14-5.i386.rpm
  ftp://updates.redhat.com/7.0/en/powertools/i386/cups-1.1.14-5.i386.rpm


• Red Hat cups-devel-1.1.14-5.alpha.rpm
  ftp://updates.redhat.com/7.0/en/powertools/alpha/cups-devel-1.1.14-5.a lpha.rpm


• Red Hat cups-devel-1.1.14-5.i386.rpm
  ftp://updates.redhat.com/7.0/en/powertools/i386/cups-devel-1.1.14-5.i3 86.rpm

Easy Software Products CUPS 1.1.10

• Caldera cups-1.1.10-5.i386.rpm
  OpenLinux 3.1.1 Server
  ftp://ftp.caldera.com/pub/updates/OpenLinux/3.1.1/Server/current/RPMS/ cups-1.1.10-5.i386.rpm


• Caldera cups-1.1.10-5.i386.rpm
  OpenLinux 3.1.1 Workstation
  ftp://ftp.caldera.com/pub/updates/OpenLinux/3.1.1/Workstation/current/ RPMS/cups-1.1.10-5.i386.rpm


• Caldera cups-client-1.1.10-5.i386.rpm
  OpenLinux 3.1.1 Server
  ftp://ftp.caldera.com/pub/updates/OpenLinux/3.1.1/Server/current/RPMS/ cups-client-1.1.10-5.i386.rpm


• Caldera cups-client-1.1.10-5.i386.rpm
  OpenLinux 3.1.1 Workstation
  ftp://ftp.caldera.com/pub/updates/OpenLinux/3.1.1/Workstation/current/ RPMS/cups-client-1.1.10-5.i386.rpm


• Caldera cups-devel-1.1.10-5.i386.rpm
  OpenLinux 3.1.1 Server
  ftp://ftp.caldera.com/pub/updates/OpenLinux/3.1.1/Server/current/RPMS/ cups-devel-1.1.10-5.i386.rpm


• Caldera cups-devel-1.1.10-5.i386.rpm
  OpenLinux 3.1.1 Workstation
  ftp://ftp.caldera.com/pub/updates/OpenLinux/3.1.1/Workstation/current/ RPMS/cups-devel-1.1.10-5.i386.rpm


• Caldera cups-ppd-1.1.10-5.i386.rpm
  OpenLinux 3.1.1 Server
  ftp://ftp.caldera.com/pub/updates/OpenLinux/3.1.1/Server/current/RPMS/ cups-ppd-1.1.10-5.i386.rpm


• Caldera cups-ppd-1.1.10-5.i386.rpm
  OpenLinux 3.1.1 Workstation
  ftp://ftp.caldera.com/pub/updates/OpenLinux/3.1.1/Workstation/current/ RPMS/cups-ppd-1.1.10-5.i386.rpm


• Conectiva cups-1.1.14-1U60_1cl.i386.rpm
  ftp://atualizacoes.conectiva.com.br/6.0/RPMS/cups-1.1.14-1U60_1cl.i386 .rpm


• Conectiva cups-1.1.14-1U70_1cl.i386.rpm
  ftp://atualizacoes.conectiva.com.br/7.0/RPMS/cups-1.1.14-1U70_1cl.i386 .rpm


• Conectiva cups-devel-1.1.14-1U60_1cl.i386.rpm
  ftp://atualizacoes.conectiva.com.br/6.0/RPMS/cups-devel-1.1.14-1U60_1c l.i386.rpm


• Conectiva cups-devel-1.1.14-1U70_1cl.i386.rpm
  ftp://atualizacoes.conectiva.com.br/7.0/RPMS/cups-devel-1.1.14-1U70_1c l.i386.rpm


• Conectiva cups-devel-static-1.1.14-1U70_1cl.i386.rpm
  ftp://atualizacoes.conectiva.com.br/7.0/RPMS/cups-devel-static-1.1.14- 1U70_1cl.i386.rpm


• Conectiva cups-doc-1.1.14-1U70_1cl.i386.rpm
  ftp://atualizacoes.conectiva.com.br/7.0/RPMS/cups-doc-1.1.14-1U70_1cl. i386.rpm


• Conectiva cups-libs-1.1.14-1U60_1cl.i386.rpm
  ftp://atualizacoes.conectiva.com.br/6.0/RPMS/cups-libs-1.1.14-1U60_1cl .i386.rpm


• Conectiva cups-libs-1.1.14-1U70_1cl.i386.rpm
  ftp://atualizacoes.conectiva.com.br/7.0/RPMS/cups-libs-1.1.14-1U70_1cl .i386.rpm


• MandrakeSoft cups-1.1.10-9.1mdk.i586.rpm
  http://telia.dl.sourceforge.net/mirrors/mandrake/updates/8.1/RPMS/cups -1.1.10-9.1mdk.i586.rpm


• MandrakeSoft cups-1.1.10-9.1mdk.ia64.rpm
  http://telia.dl.sourceforge.net/mirrors/mandrake/updates/ia64/8.1/RPMS /cups-1.1.10-9.1mdk.ia64.rpm


• MandrakeSoft cups-common-1.1.10-9.1mdk.i586.rpm
  http://telia.dl.sourceforge.net/mirrors/mandrake/updates/8.1/RPMS/cups -common-1.1.10-9.1mdk.i586.rpm


• MandrakeSoft cups-common-1.1.10-9.1mdk.ia64.rpm
  http://telia.dl.sourceforge.net/mirrors/mandrake/updates/ia64/8.1/RPMS /cups-common-1.1.10-9.1mdk.ia64.rpm


• MandrakeSoft cups-serial-1.1.10-9.1mdk.i586.rpm
  http://telia.dl.sourceforge.net/mirrors/mandrake/updates/8.1/RPMS/cups -serial-1.1.10-9.1mdk.i586.rpm


• MandrakeSoft cups-serial-1.1.10-9.1mdk.ia64.rpm
  http://telia.dl.sourceforge.net/mirrors/mandrake/updates/ia64/8.1/RPMS /cups-serial-1.1.10-9.1mdk.ia64.rpm

Easy Software Products CUPS 1.1.6

• S.u.S.E. cups-1.1.10-36.sparc.rpm
  Release 7.3
  ftp://ftp.suse.com/pub/suse/sparc/update/7.3/n1/cups-1.1.10-36.sparc.r pm


• S.u.S.E. cups-1.1.10-63.ppc.rpm
  Release 7.3
  ftp://ftp.suse.com/pub/suse/ppc/update/7.3/n1/cups-1.1.10-63.ppc.rpm


• S.u.S.E. cups-1.1.10-83.i386.rpm
  Release 7.3
  ftp://ftp.suse.com/pub/suse/i386/update/7.3/n1/cups-1.1.10-83.i386.rpm


• S.u.S.E. cups-1.1.6-104.i386.rpm
  Release 7.2
  ftp://ftp.suse.com/pub/suse/i386/update/7.2/n1/cups-1.1.6-104.i386.rpm


• S.u.S.E. cups-1.1.6-105.i386.rpm
  Release 7.1
  ftp://ftp.suse.com/pub/suse/i386/update/7.1/n2/cups-1.1.6-105.i386.rpm


• S.u.S.E. cups-1.1.6-34.alpha.rpm
  Release 7.1
  ftp://ftp.suse.com/pub/suse/axp/update/7.1/n2/cups-1.1.6-34.alpha.rpm


• S.u.S.E. cups-1.1.6-38.sparc.rpm
  Release 7.1
  ftp://ftp.suse.com/pub/suse/sparc/update/7.1/n2/cups-1.1.6-38.sparc.rp m


• S.u.S.E. cups-client-1.1.10-36.sparc.rpm
  Release 7.3
  ftp://ftp.suse.com/pub/suse/sparc/update/7.3/n1/cups-client-1.1.10-36. sparc.rpm


• S.u.S.E. cups-client-1.1.10-63.ppc.rpm
  Release 7.3
  ftp://ftp.suse.com/pub/suse/ppc/update/7.3/n1/cups-client-1.1.10-63.pp c.rpm


• S.u.S.E. cups-client-1.1.10-83.i386.rpm
  Release 7.3
  ftp://ftp.suse.com/pub/suse/i386/update/7.3/n1/cups-client-1.1.10-83.i 386.rpm


• S.u.S.E. cups-devel-1.1.10-36.sparc.rpm
  Release 7.3
  ftp://ftp.suse.com/pub/suse/sparc/update/7.3/d3/cups-devel-1.1.10-36.s parc.rpm


• S.u.S.E. cups-devel-1.1.10-63.ppc.rpm
  Release 7.3
  ftp://ftp.suse.com/pub/suse/ppc/update/7.3/d3/cups-devel-1.1.10-63.ppc .rpm


• S.u.S.E. cups-devel-1.1.10-83.i386.rpm
  Release 7.3
  ftp://ftp.suse.com/pub/suse/i386/update/7.3/d3/cups-devel-1.1.10-83.i3 86.rpm


• S.u.S.E. cups-devel-1.1.6-104.i386.rpm
  Release 7.2
  ftp://ftp.suse.com/pub/suse/i386/update/7.2/d3/cups-devel-1.1.6-104.i3 86.rpm


• S.u.S.E. cups-devel-1.1.6-105.i386.rpm
  Release 7.1
  ftp://ftp.suse.com/pub/suse/i386/update/7.1/d3/cups-devel-1.1.6-105.i3 86.rpm


• S.u.S.E. cups-devel-1.1.6-34.alpha.rpm
  Release 7.1
  ftp://ftp.suse.com/pub/suse/axp/update/7.1/d3/cups-devel-1.1.6-34.alph a.rpm


• S.u.S.E. cups-devel-1.1.6-38.sparc.rpm
  Release 7.1
  ftp://ftp.suse.com/pub/suse/sparc/update/7.1/d3/cups-devel-1.1.6-38.sp arc.rpm


• S.u.S.E. cups-libs-1.1.10-36.sparc.rpm
  Release 7.3
  ftp://ftp.suse.com/pub/suse/sparc/update/7.3/n1/cups-libs-1.1.10-36.sp arc.rpm


• S.u.S.E. cups-libs-1.1.10-63.ppc.rpm
  Release 7.3
  ftp://ftp.suse.com/pub/suse/ppc/update/7.3/n1/cups-libs-1.1.10-63.ppc. rpm


• S.u.S.E. cups-libs-1.1.10-83.i386.rpm
  Release 7.3
  ftp://ftp.suse.com/pub/suse/i386/update/7.3/n1/cups-libs-1.1.10-83.i38 6.rpm

Easy Software Products CUPS 1.1.7

• MandrakeSoft cups-1.1.10-9.1mdk.i586.rpm
  http://telia.dl.sourceforge.net/mirrors/mandrake/updates/8.1/RPMS/cups -1.1.10-9.1mdk.i586.rpm


• MandrakeSoft cups-1.1.7-2.1mdk.i586.rpm
  http://telia.dl.sourceforge.net/mirrors/mandrake/updates/8.0/RPMS/cups -1.1.7-2.1mdk.i586.rpm


• MandrakeSoft cups-1.1.7-2.1mdk.ppc.rpm
  http://telia.dl.sourceforge.net/mirrors/mandrake/updates/ppc/8.0/RPMS/ cups-1.1.7-2.1mdk.ppc.rpm


• MandrakeSoft cups-1.1.7-2.2mdk.i586.rpm
  http://telia.dl.sourceforge.net/mirrors/mandrake/updates/7.2/RPMS/cups -1.1.7-2.2mdk.i586.rpm


• MandrakeSoft cups-common-1.1.7-2.1mdk.i586.rpm
  http://telia.dl.sourceforge.net/mirrors/mandrake/updates/8.0/RPMS/cups -common-1.1.7-2.1mdk.i586.rpm


• MandrakeSoft cups-common-1.1.7-2.1mdk.ppc.rpm
  http://telia.dl.sourceforge.net/mirrors/mandrake/updates/ppc/8.0/RPMS/ cups-common-1.1.7-2.1mdk.ppc.rpm


• MandrakeSoft cups-devel-1.1.7-2.2mdk.i586.rpm
  http://telia.dl.sourceforge.net/mirrors/mandrake/updates/7.2/RPMS/cups -devel-1.1.7-2.2mdk.i586.rpm