Vulnerability Bulletins |
Múltiples vulnerabilidades en Cups |
|
Vulnerability classification |
|
| Property | Value |
| Confidence level | Oficial |
| Impact | Obtener acceso |
| Dificulty | Experto |
| Required attacker level | Acceso remoto con cuenta |
System information |
|
| Property | Value |
| Affected manufacturer | GNU/Linux |
| Affected software |
Cups Tetex |
Description |
|
|
Se han descubierto múltiples vulnerabilidades en Cups. Las vulnerabilidades son descritas a continuación: - CVE-2009-0791: Se ha descubierto una vulnerabilidad de tipo desbordamiento de búfer. La vulnerabilidad reside en un error en el filtro "pdftops". Un atacante remoto podría causar una denegación de servicio o ejecutar código arbitrario mediante mediante un fichero PDF especialmente diseñado. - CVE-2009-1196: La vulnerabilidad reside en un error en la rutina del planificador de servicio de directorio, usado para obtener información sobre impresoras disponibles. Un atacante remoto podría causar una denegación de servicio mediante. |
|
Solution |
|
|
Actualización de software Red Hat (RHSA-2009:1083-1) Red Hat Desktop (v. 3) Red Hat Desktop (v. 4) Red Hat Enterprise Linux AS (v. 3) Red Hat Enterprise Linux AS (v. 4) Red Hat Enterprise Linux AS (v. 4.8.z) Red Hat Enterprise Linux ES (v. 3) Red Hat Enterprise Linux ES (v. 4) Red Hat Enterprise Linux ES (v. 4.8.z) Red Hat Enterprise Linux WS (v. 3) Red Hat Enterprise Linux WS (v. 4) https://rhn.redhat.com/ Suse Linux Las actualizaciones pueden descargarse mediante YAST o del servidor FTP oficial de Suse Linux. Red Hat (RHSA-2009:1500-1) Red Hat Desktop (v. 3) Red Hat Enterprise Linux AS (v. 3) Red Hat Enterprise Linux ES (v. 3) Red Hat Enterprise Linux WS (v. 3) https://rhn.redhat.com/ Red Hat (RHSA-2009:1501-1) Red Hat Desktop (v. 4) Red Hat Enterprise Linux AS (v. 4) Red Hat Enterprise Linux AS (v. 4.8.z) Red Hat Enterprise Linux ES (v. 4) Red Hat Enterprise Linux ES (v. 4.8.z) Red Hat Enterprise Linux WS (v. 4) https://rhn.redhat.com/ Red Hat (RHSA-2009:1502-1) RHEL Desktop Workstation (v. 5 cliente) RHEL Optional Productivity Applications (v. 5 servidor) RHEL Optional Productivity Applications EUS (v. 5.4.z servidor) Red Hat Enterprise Linux Desktop (v. 5 cliente) https://rhn.redhat.com/ Red Hat (RHSA-2009:1503-1) Red Hat Desktop (v. 4) Red Hat Enterprise Linux AS (v. 4) Red Hat Enterprise Linux AS (v. 4.8.z) Red Hat Enterprise Linux ES (v. 4) Red Hat Enterprise Linux ES (v. 4.8.z) Red Hat Enterprise Linux WS (v. 4) https://rhn.redhat.com/ Red Hat (RHSA-2009:1512-1) Red Hat Desktop (v. 4) Red Hat Enterprise Linux AS (v. 4) Red Hat Enterprise Linux AS (v. 4.8.z) Red Hat Enterprise Linux ES (v. 4) Red Hat Enterprise Linux ES (v. 4.8.z) Red Hat Enterprise Linux WS (v. 4) https://rhn.redhat.com/ Suse Linux Las actualizaciones pueden descargarse mediante YAST o del servidor FTP oficial de Suse Linux. Red Hat (RHSA-2010:0401-1) Red Hat Desktop (v. 3) Red Hat Enterprise Linux AS (v. 3) Red Hat Enterprise Linux ES (v. 3) Red Hat Enterprise Linux WS (v. 3) https://rhn.redhat.com/ Red Hat (RHSA-2010:0400-1) Red Hat Enterprise Linux (v. 5 servidor) Red Hat Enterprise Linux Desktop (v. 5 cliente) https://rhn.redhat.com/ |
|
Standar resources |
|
| Property | Value |
| CVE |
CVE-2009-0791 CVE-2009-1196 |
| BID | |
Other resources |
|
|
Red Hat Security Advisory (RHSA-2009:1083-1) https://rhn.redhat.com/errata/RHSA-2009-1083.html SUSE Security Advisory (SUSE-SR:2009:012) http://www.novell.com/linux/security/advisories/2009_12_sr.html SUSE Security Advisory (SUSE-SR:2009:014) http://www.novell.com/linux/security/advisories/2009_14_sr.html Red Hat Security Advisory (RHSA-2009:1500-01) https://rhn.redhat.com/errata/RHSA-2009-1500.html Red Hat Security Advisory (RHSA-2009:1501-01) https://rhn.redhat.com/errata/RHSA-2009-1501.html Red Hat Security Advisory (RHSA-2009:1502-01) https://rhn.redhat.com/errata/RHSA-2009-1502.html Red Hat Security Advisory (RHSA-2009:1503-01) https://rhn.redhat.com/errata/RHSA-2009-1503.html Red Hat Security Advisory (RHSA-2009:1512-01) https://rhn.redhat.com/errata/RHSA-2009-1512.html SUSE Security Advisory (SUSE-SR:2009:020) http://www.novell.com/linux/security/advisories/2009_20_sr.html Red Hat Security Advisory (RHSA-2010:0401-1) https://rhn.redhat.com/errata/RHSA-2010-0401.html Red Hat Security Advisory (RHSA-2010:0400-1) https://rhn.redhat.com/errata/RHSA-2010-0400.html |
|
Version history |
||
| Version | Comments | Date |
| 1.0 | Aviso emitido | 2009-06-08 |
| 1.1 | Aviso emitido por Suse (SUSE-SR:2009:012) | 2009-07-07 |
| 1.2 | Aviso emitido por Suse (SUSE-SR:2009:014) | 2009-09-10 |
| 1.3 | Aviso emitido por Red Hat (RHSA-2009:1500-01), aviso emitido por Red Hat (RHSA-2009:1501-01), aviso emitido por Red Hat (RHSA-2009:1502-01), aviso emitido por Red Hat (RHSA-2009:1503-01), aviso emitido por Red Hat (RHSA-2009:1512-01) | 2009-10-19 |
| 1.4 | Aviso emitido por Suse (SUSE-SR:2009:020) | 2010-01-19 |
| 1.5 | Aviso emitido por Red Hat (RHSA-2010:0401-1) | 2010-05-07 |