Public bug reported:

Binary package hint: cupsys

References:
DSA-1437-1 (http://www.debian.org/security/2007/dsa-1437)

Quoting:
"Several local vulnerabilities have been discovered in the Common UNIX
Printing System. The Common Vulnerabilities and Exposures project
identifies the following problems:

CVE-2007-5849

    Wei Wang discovered that an buffer overflow in the SNMP backend
    may lead to the execution of arbitrary code.

CVE-2007-6358

    Elias Pipping discovered that insecure handling of a temporary
    file in the pdftops.pl script may lead to local denial of service.
    This vulnerability is not exploitable in the default configuration."

** Affects: cupsys (Ubuntu)
     Importance: Undecided
         Status: New

** Visibility changed to: Public

** CVE added: http://www.cve.mitre.org/cgi-
bin/cvename.cgi?name=2007-5849

** CVE added: http://www.cve.mitre.org/cgi-
bin/cvename.cgi?name=2007-6358

-- 
[cupsys] [CVE-2007-5849] [CVE-2007-6358] local vulnerabilities
https://bugs.launchpad.net/bugs/180296
You received this bug notification because you are a member of Ubuntu
Bugs, which is the bug contact for Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to