Executive Summary
| Informations | |||
|---|---|---|---|
| Name | MDVSA-2015:196 | First vendor Publication | 2015-04-07 |
| Vendor | Mandriva | Last vendor Modification | 2015-04-07 |
| Severity (Vendor) | N/A | Revision | N/A |
Security-Database Scoring CVSS v3
| Cvss vector : N/A | |||
|---|---|---|---|
| Overall CVSS Score | NA | ||
| Base Score | NA | Environmental Score | NA |
| impact SubScore | NA | Temporal Score | NA |
| Exploitabality Sub Score | NA | ||
| Calculate full CVSS 3.0 Vectors scores | |||
Security-Database Scoring CVSS v2
| Cvss vector : (AV:N/AC:L/Au:N/C:P/I:P/A:P) | |||
|---|---|---|---|
| Cvss Base Score | 7.5 | Attack Range | Network |
| Cvss Impact Score | 6.4 | Attack Complexity | Low |
| Cvss Expoit Score | 10 | Authentication | None Required |
| Calculate full CVSS 2.0 Vectors scores | |||
Detail
| Updated cups-filters package fixes security vulnerability: cups-browsed in cups-filters before 1.0.66 contained a bug in the remove_bad_chars\(\) function, where it failed to reliably filter out illegal characters if there were two or more subsequent illegal characters, allowing execution of arbitrary commands with the rights of the lp user, using forged print service announcements on DNS-SD servers (CVE-2015-2265). |
Original Source
| Url : http://www.mandriva.com/security/advisories?name=MDVSA-2015:196 |
CWE : Common Weakness Enumeration
| % | Id | Name |
|---|---|---|
| 100 % | CWE-77 | Improper Sanitization of Special Elements used in a Command ('Command Injection') |
OVAL Definitions
| Definition Id: oval:org.mitre.oval:def:29251 | |||
| Oval ID: | oval:org.mitre.oval:def:29251 | ||
| Title: | SUSE-SU-2015:0805-1 -- Security update for cups-filters (moderate) | ||
| Description: | cups-filters was updated to fix one security issue. This security issue was fixed: - CVE-2015-2265: Remote command execution in remove_bad_chars() (bnc#921753). This non-security issue was fixed: - LSB compliance of foomatic-rip (bnc#915545). | ||
| Family: | unix | Class: | patch |
| Reference(s): | SUSE-SU-2015:0805-1 CVE-2015-2265 | Version: | 3 |
| Platform(s): | SUSE Linux Enterprise Server 12 SUSE Linux Enterprise Desktop 12 | Product(s): | cups-filters |
| Definition Synopsis: | |||
| |||
CPE : Common Platform Enumeration
Nessus® Vulnerability Scanner
| Date | Description |
|---|---|
| 2015-07-15 | Name : The remote openSUSE host is missing a security update. File : openSUSE-2015-492.nasl - Type : ACT_GATHER_INFO |
| 2015-05-20 | Name : The remote SUSE host is missing one or more security updates. File : suse_SU-2015-0805-1.nasl - Type : ACT_GATHER_INFO |
| 2015-04-08 | Name : The remote Mandriva Linux host is missing one or more security updates. File : mandriva_MDVSA-2015-196.nasl - Type : ACT_GATHER_INFO |
| 2015-03-17 | Name : The remote Fedora host is missing a security update. File : fedora_2015-2949.nasl - Type : ACT_GATHER_INFO |
| 2015-03-17 | Name : The remote Fedora host is missing a security update. File : fedora_2015-3003.nasl - Type : ACT_GATHER_INFO |
| 2015-03-17 | Name : The remote Fedora host is missing a security update. File : fedora_2015-3036.nasl - Type : ACT_GATHER_INFO |
| 2015-03-17 | Name : The remote Ubuntu host is missing a security-related patch. File : ubuntu_USN-2532-1.nasl - Type : ACT_GATHER_INFO |
Alert History
| Date | Informations |
|---|---|
| 2015-04-09 13:29:16 |
|
| 2015-04-07 13:26:41 |
|
