6.8 - RHSA-2009:1083

Executive Summary

This Alert is flagged as TOP 25 Common Weakness Enumeration from CWE/SANS. For more information, you can read this.

Summary
Title	cups security update

Informations
Name	RHSA-2009:1083	First vendor Publication	2009-06-03
Vendor	RedHat	Last vendor Modification	2009-06-03
Severity (Vendor)	Important	Revision	01

Security-Database Scoring CVSS v3

Cvss vector : N/A
Overall CVSS Score	NA
Base Score	NA	Environmental Score	NA
impact SubScore	NA	Temporal Score	NA
Exploitabality Sub Score	NA

Calculate full CVSS 3.0 Vectors scores

Security-Database Scoring CVSS v2

Cvss vector : (AV:N/AC:M/Au:N/C:P/I:P/A:P)
Cvss Base Score	6.8	Attack Range	Network
Cvss Impact Score	6.4	Attack Complexity	Medium
Cvss Expoit Score	8.6	Authentication	None Required
Calculate full CVSS 2.0 Vectors scores

Detail

Problem Description:

Updated cups packages that fix multiple security issues are now available for Red Hat Enterprise Linux 3 and 4.

This update has been rated as having important security impact by the Red Hat Security Response Team.

2. Relevant releases/architectures:

Red Hat Enterprise Linux AS version 3 - i386, ia64, ppc, s390, s390x, x86_64 Red Hat Desktop version 3 - i386, x86_64 Red Hat Enterprise Linux ES version 3 - i386, ia64, x86_64 Red Hat Enterprise Linux WS version 3 - i386, ia64, x86_64 Red Hat Enterprise Linux AS version 4 - i386, ia64, ppc, s390, s390x, x86_64 Red Hat Enterprise Linux Desktop version 4 - i386, x86_64 Red Hat Enterprise Linux ES version 4 - i386, ia64, x86_64 Red Hat Enterprise Linux WS version 4 - i386, ia64, x86_64

3. Description:

The Common UNIX® Printing System (CUPS) provides a portable printing layer for UNIX operating systems. The Internet Printing Protocol (IPP) allows users to print and manage printing-related tasks over a network. The CUPS "pdftops" filter converts Portable Document Format (PDF) files to PostScript. "pdftops" is based on Xpdf and the CUPS imaging library.

A NULL pointer dereference flaw was found in the CUPS IPP routine, used for processing incoming IPP requests for the CUPS scheduler. An attacker could use this flaw to send specially-crafted IPP requests that would crash the cupsd daemon. (CVE-2009-0949)

A use-after-free flaw was found in the CUPS scheduler directory services routine, used to process data about available printers and printer classes. An attacker could use this flaw to cause a denial of service (cupsd daemon stop or crash). (CVE-2009-1196)

Multiple integer overflows flaws, leading to heap-based buffer overflows, were found in the CUPS "pdftops" filter. An attacker could create a malicious PDF file that would cause "pdftops" to crash or, potentially, execute arbitrary code as the "lp" user if the file was printed. (CVE-2009-0791)

Red Hat would like to thank Anibal Sacco from Core Security Technologies for reporting the CVE-2009-0949 flaw, and Swen van Brussel for reporting the CVE-2009-1196 flaw.

Users of cups are advised to upgrade to these updated packages, which contain backported patches to correct these issues. After installing this update, the cupsd daemon will be restarted automatically.

4. Solution:

Before applying this update, make sure that all previously-released errata relevant to your system have been applied.

This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://kbase.redhat.com/faq/docs/DOC-11259

5. Bugs fixed (http://bugzilla.redhat.com/):

491840 - CVE-2009-0791 cups: Multiple integer overflows in the CUPS "pdftops" filter 497135 - CVE-2009-1196 cups: DoS (stop, crash) by renewing CUPS browse packets 500972 - CVE-2009-0949 cups: IPP_TAG_UNSUPPORTED handling NULL pointer dereference DoS

Original Source

Url : https://rhn.redhat.com/errata/RHSA-2009-1083.html

CWE : Common Weakness Enumeration

%	Id	Name
50 %	CWE-399	Resource Management Errors
50 %	CWE-189	Numeric Errors (CWE/SANS Top 25)

OVAL Definitions

Definition Id: oval:org.mitre.oval:def:10534

Oval ID:	oval:org.mitre.oval:def:10534
Title:	Multiple integer overflows in Xpdf 2.x and 3.x and Poppler 0.x, as used in the pdftops filter in CUPS 1.1.17, 1.1.22, and 1.3.7, GPdf, and kdegraphics KPDF, allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted PDF file that triggers a heap-based buffer overflow, possibly related to (1) Decrypt.cxx, (2) FoFiTrueType.cxx, (3) gmem.c, (4) JBIG2Stream.cxx, and (5) PSOutputDev.cxx in pdftops/. NOTE: the JBIG2Stream.cxx vector may overlap CVE-2009-1179.
Description:	Multiple integer overflows in Xpdf 2.x and 3.x and Poppler 0.x, as used in the pdftops filter in CUPS 1.1.17, 1.1.22, and 1.3.7, GPdf, and kdegraphics KPDF, allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted PDF file that triggers a heap-based buffer overflow, possibly related to (1) Decrypt.cxx, (2) FoFiTrueType.cxx, (3) gmem.c, (4) JBIG2Stream.cxx, and (5) PSOutputDev.cxx in pdftops/. NOTE: the JBIG2Stream.cxx vector may overlap CVE-2009-1179.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2009-0791	Version:	5
Platform(s):	Red Hat Enterprise Linux 3 CentOS Linux 3 Red Hat Enterprise Linux 4 CentOS Linux 4 Oracle Linux 4 Red Hat Enterprise Linux 5 CentOS Linux 5 Oracle Linux 5	Product(s):
Definition Synopsis:
OS Section: RHEL3, CentOS3 RHEL3 or CentOS3 The operating system installed on the system is Red Hat Enterprise Linux 3 AND CentOS Linux 3.x AND Configuration section tetex-latex is earlier than 0:1.0.7-67.19 AND tetex-dvips is earlier than 0:1.0.7-67.19 AND tetex-fonts is earlier than 0:1.0.7-67.19 AND cups-libs is earlier than 1:1.1.17-13.3.62 AND tetex is earlier than 0:1.0.7-67.19 AND cups-devel is earlier than 1:1.1.17-13.3.62 AND tetex-afm is earlier than 0:1.0.7-67.19 AND xpdf is earlier than 1:2.02-17.el3 AND tetex-xdvi is earlier than 0:1.0.7-67.19 AND tetex-doc is earlier than 0:1.0.7-67.19 AND cups is earlier than 1:1.1.17-13.3.62 OR OS Section: RHEL4, CentOS4, Oracle Linux 4 RHEL4, CentOS4 or Oracle Linux 4 The operating system installed on the system is Red Hat Enterprise Linux 4 AND CentOS Linux 4.x AND Oracle Linux 4.x AND Configuration section tetex-latex is earlier than 0:2.0.2-22.0.1.EL4.16 AND kdegraphics-devel is earlier than 7:3.3.1-15.el4_8.2 AND tetex-dvips is earlier than 0:2.0.2-22.0.1.EL4.16 AND kdegraphics is earlier than 7:3.3.1-15.el4_8.2 AND tetex-fonts is earlier than 0:2.0.2-22.0.1.EL4.16 AND cups-libs is earlier than 1:1.1.22-0.rc1.9.32.el4_8.3 AND tetex is earlier than 0:2.0.2-22.0.1.EL4.16 AND gpdf is earlier than 0:2.8.2-7.7.2.el4_8.5 AND cups-devel is earlier than 1:1.1.22-0.rc1.9.32.el4_8.3 AND tetex-afm is earlier than 0:2.0.2-22.0.1.EL4.16 AND xpdf is earlier than 1:3.00-22.el4_8.1 AND tetex-xdvi is earlier than 0:2.0.2-22.0.1.EL4.16 AND tetex-doc is earlier than 0:2.0.2-22.0.1.EL4.16 AND cups is earlier than 1:1.1.22-0.rc1.9.32.el4_8.3 OR OS Section: RHEL5, CentOS5, Oracle Linux 5 RHEL5, CentOS5 or Oracle Linux 5 The operating system installed on the system is Red Hat Enterprise Linux 5 AND CentOS Linux 5.x AND Oracle Linux 5.x AND Configuration section tetex-latex is earlier than 0:3.0-33.8.el5_5.5 AND kdegraphics-devel is earlier than 7:3.5.4-15.el5_4.2 AND tetex-dvips is earlier than 0:3.0-33.8.el5_5.5 AND poppler-utils is earlier than 0:0.5.4-4.4.el5_3.9 AND kdegraphics is earlier than 7:3.5.4-15.el5_4.2 AND poppler is earlier than 0:0.5.4-4.4.el5_3.9 AND tetex-fonts is earlier than 0:3.0-33.8.el5_5.5 AND tetex is earlier than 0:3.0-33.8.el5_5.5 AND tetex-afm is earlier than 0:3.0-33.8.el5_5.5 AND tetex-xdvi is earlier than 0:3.0-33.8.el5_5.5 AND poppler-devel is earlier than 0:0.5.4-4.4.el5_3.9 AND tetex-doc is earlier than 0:3.0-33.8.el5_5.5

Definition Id: oval:org.mitre.oval:def:11217

Oval ID:	oval:org.mitre.oval:def:11217
Title:	The directory-services functionality in the scheduler in CUPS 1.1.17 and 1.1.22 allows remote attackers to cause a denial of service (cupsd daemon outage or crash) via manipulations of the timing of CUPS browse packets, related to a "pointer use-after-delete flaw."
Description:	The directory-services functionality in the scheduler in CUPS 1.1.17 and 1.1.22 allows remote attackers to cause a denial of service (cupsd daemon outage or crash) via manipulations of the timing of CUPS browse packets, related to a "pointer use-after-delete flaw."
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2009-1196	Version:	5
Platform(s):	Red Hat Enterprise Linux 3 CentOS Linux 3 Red Hat Enterprise Linux 4 CentOS Linux 4 Oracle Linux 4	Product(s):
Definition Synopsis:
OS Section: RHEL3, CentOS3 RHEL3 or CentOS3 The operating system installed on the system is Red Hat Enterprise Linux 3 AND CentOS Linux 3.x AND Configuration section cups-devel is earlier than 1:1.1.17-13.3.62 AND cups is earlier than 1:1.1.17-13.3.62 AND cups-libs is earlier than 1:1.1.17-13.3.62 OR OS Section: RHEL4, CentOS4, Oracle Linux 4 RHEL4, CentOS4 or Oracle Linux 4 The operating system installed on the system is Red Hat Enterprise Linux 4 AND CentOS Linux 4.x AND Oracle Linux 4.x AND Configuration section cups-devel is earlier than 1:1.1.22-0.rc1.9.32.el4_8.3 AND cups is earlier than 1:1.1.22-0.rc1.9.32.el4_8.3 AND cups-libs is earlier than 1:1.1.22-0.rc1.9.32.el4_8.3

Definition Id: oval:org.mitre.oval:def:13861

Oval ID:	oval:org.mitre.oval:def:13861
Title:	USN-780-1 -- cups, cupsys vulnerability
Description:	Anibal Sacco discovered that CUPS did not properly handle certain network operations. A remote attacker could exploit this flaw and cause the CUPS server to crash, resulting in a denial of service.
Family:	unix	Class:	patch
Reference(s):	USN-780-1 CVE-2009-0949	Version:	5
Platform(s):	Ubuntu 8.04 Ubuntu 9.04 Ubuntu 6.06 Ubuntu 8.10	Product(s):	cups cupsys
Definition Synopsis:
Release section Ubuntu 8.04 is installed AND Architecture section Architecture independent section Installed architecture is all AND cupsys-common DPKG is earlier than 1.3.7-1ubuntu3.5 OR Architecture depended section Supported architectures section Installed architecture is amd64 AND Installed architecture is i386 AND Installed architecture is powerpc AND Installed architecture is sparc AND Installed architecture is lpia AND Packages section cupsys-bsd DPKG is earlier than 1.3.7-1ubuntu3.5 AND cupsys-client DPKG is earlier than 1.3.7-1ubuntu3.5 AND libcupsimage2 DPKG is earlier than 1.3.7-1ubuntu3.5 AND libcupsimage2-dev DPKG is earlier than 1.3.7-1ubuntu3.5 AND libcupsys2-dev DPKG is earlier than 1.3.7-1ubuntu3.5 AND cupsys DPKG is earlier than 1.3.7-1ubuntu3.5 AND libcupsys2 DPKG is earlier than 1.3.7-1ubuntu3.5 OR Release section Ubuntu 9.04 is installed AND Architecture section Architecture independent section Installed architecture is all AND Packages section cupsys-bsd DPKG is earlier than 1.3.9-17ubuntu3.1 AND cupsys-client DPKG is earlier than 1.3.9-17ubuntu3.1 AND cupsys-dbg DPKG is earlier than 1.3.9-17ubuntu3.1 AND cups-common DPKG is earlier than 1.3.9-17ubuntu3.1 AND cupsys DPKG is earlier than 1.3.9-17ubuntu3.1 AND libcupsys2 DPKG is earlier than 1.3.9-17ubuntu3.1 AND libcupsys2-dev DPKG is earlier than 1.3.9-17ubuntu3.1 AND cupsys-common DPKG is earlier than 1.3.9-17ubuntu3.1 OR Architecture depended section Supported architectures section Installed architecture is amd64 AND Installed architecture is i386 AND Installed architecture is powerpc AND Installed architecture is sparc AND Installed architecture is lpia AND Packages section libcups2-dev DPKG is earlier than 1.3.9-17ubuntu3.1 AND cups-bsd DPKG is earlier than 1.3.9-17ubuntu3.1 AND libcupsimage2-dev DPKG is earlier than 1.3.9-17ubuntu3.1 AND libcupsimage2 DPKG is earlier than 1.3.9-17ubuntu3.1 AND cups-client DPKG is earlier than 1.3.9-17ubuntu3.1 AND libcups2 DPKG is earlier than 1.3.9-17ubuntu3.1 AND cups-dbg DPKG is earlier than 1.3.9-17ubuntu3.1 AND cups DPKG is earlier than 1.3.9-17ubuntu3.1 OR Release section Ubuntu 6.06 is installed AND Architecture section Architecture independent section Installed architecture is all AND libcupsys2-gnutls10 DPKG is earlier than 1.2.2-0ubuntu0.6.06.14 OR Architecture depended section Supported architectures section Installed architecture is sparc AND Installed architecture is powerpc AND Installed architecture is amd64 AND Installed architecture is i386 AND Packages section cupsys-bsd DPKG is earlier than 1.2.2-0ubuntu0.6.06.14 AND cupsys-client DPKG is earlier than 1.2.2-0ubuntu0.6.06.14 AND libcupsys2-dev DPKG is earlier than 1.2.2-0ubuntu0.6.06.14 AND libcupsimage2-dev DPKG is earlier than 1.2.2-0ubuntu0.6.06.14 AND libcupsimage2 DPKG is earlier than 1.2.2-0ubuntu0.6.06.14 AND cupsys DPKG is earlier than 1.2.2-0ubuntu0.6.06.14 AND libcupsys2 DPKG is earlier than 1.2.2-0ubuntu0.6.06.14 OR Release section Ubuntu 8.10 is installed AND Architecture section Architecture independent section Installed architecture is all AND Packages section cupsys-bsd DPKG is earlier than 1.3.9-2ubuntu9.2 AND cupsys-client DPKG is earlier than 1.3.9-2ubuntu9.2 AND cupsys-dbg DPKG is earlier than 1.3.9-2ubuntu9.2 AND cups-common DPKG is earlier than 1.3.9-2ubuntu9.2 AND cupsys DPKG is earlier than 1.3.9-2ubuntu9.2 AND libcupsys2 DPKG is earlier than 1.3.9-2ubuntu9.2 AND libcupsys2-dev DPKG is earlier than 1.3.9-2ubuntu9.2 AND cupsys-common DPKG is earlier than 1.3.9-2ubuntu9.2 OR Architecture depended section Supported architectures section Installed architecture is amd64 AND Installed architecture is i386 AND Installed architecture is powerpc AND Installed architecture is sparc AND Installed architecture is lpia AND Packages section libcups2-dev DPKG is earlier than 1.3.9-2ubuntu9.2 AND cups-bsd DPKG is earlier than 1.3.9-2ubuntu9.2 AND libcupsimage2-dev DPKG is earlier than 1.3.9-2ubuntu9.2 AND libcupsimage2 DPKG is earlier than 1.3.9-2ubuntu9.2 AND cups-client DPKG is earlier than 1.3.9-2ubuntu9.2 AND libcups2 DPKG is earlier than 1.3.9-2ubuntu9.2 AND cups-dbg DPKG is earlier than 1.3.9-2ubuntu9.2 AND cups DPKG is earlier than 1.3.9-2ubuntu9.2

Definition Id: oval:org.mitre.oval:def:18638

Oval ID:	oval:org.mitre.oval:def:18638
Title:	DSA-1811-1 cups cupsys - denial of service
Description:	Anibal Sacco discovered that cups, a general printing system for UNIX systems, suffers from null pointer dereference because of its handling of two consecutive IPP packets with certain tag attributes that are treated as IPP_TAG_UNSUPPORTED tags. This allows unauthenticated attackers to perform denial of service attacks by crashing the cups daemon.
Family:	unix	Class:	patch
Reference(s):	DSA-1811-1 CVE-2009-0949	Version:	7
Platform(s):	Debian GNU/Linux 4.0 Debian GNU/Linux 5.0	Product(s):	cupsys cups
Definition Synopsis:
Release section Debian GNU/Linux 4.0 is installed. AND cupsys DPKG is earlier than 1.2.7-4+etch8 AND Release section Debian GNU/Linux 5.0 is installed AND cups DPKG is earlier than 1.3.8-1+lenny6

Definition Id: oval:org.mitre.oval:def:21903

Oval ID:	oval:org.mitre.oval:def:21903
Title:	ELSA-2009:1082: cups security update (Important)
Description:	The ippReadIO function in cups/ipp.c in cupsd in CUPS before 1.3.10 does not properly initialize memory for IPP request packets, which allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a scheduler request with two consecutive IPP_TAG_UNSUPPORTED tags.
Family:	unix	Class:	patch
Reference(s):	ELSA-2009:1082-01 CVE-2009-0949	Version:	6
Platform(s):	Oracle Linux 5	Product(s):	cups
Definition Synopsis:
Oracle Linux 5.x rpm test cups-lpd is earlier than 1:1.3.7-8.el5_3.6 AND cups-devel is earlier than 1:1.3.7-8.el5_3.6 AND cups-libs is earlier than 1:1.3.7-8.el5_3.6 AND cups is earlier than 1:1.3.7-8.el5_3.6

Definition Id: oval:org.mitre.oval:def:29206

Oval ID:	oval:org.mitre.oval:def:29206
Title:	RHSA-2009:1082 -- cups security update (Important)
Description:	Updated cups packages that fix one security issue are now available for Red Hat Enterprise Linux 5. This update has been rated as having important security impact by the Red Hat Security Response Team. The Common UNIX reg; Printing System (CUPS) provides a portable printing layer for UNIX operating systems. The Internet Printing Protocol (IPP) allows users to print and manage printing-related tasks over a network. A NULL pointer dereference flaw was found in the CUPS IPP routine, used for processing incoming IPP requests for the CUPS scheduler. An attacker could use this flaw to send specially-crafted IPP requests that would crash the cupsd daemon. (CVE-2009-0949)
Family:	unix	Class:	patch
Reference(s):	RHSA-2009:1082 CESA-2009:1082-CentOS 5 CVE-2009-0949	Version:	3
Platform(s):	Red Hat Enterprise Linux 5 CentOS Linux 5	Product(s):	cups
Definition Synopsis:
Operation system section The operating system installed on the system is Red Hat Enterprise Linux 5 AND The operating system installed on the system is CentOS Linux 5.x Packages match section cups-devel is earlier than 1:1.3.7-8.el5_3.6 AND cups is earlier than 1:1.3.7-8.el5_3.6 AND cups-libs is earlier than 1:1.3.7-8.el5_3.6 AND cups-lpd is earlier than 1:1.3.7-8.el5_3.6

Definition Id: oval:org.mitre.oval:def:8074

Oval ID:	oval:org.mitre.oval:def:8074
Title:	DSA-1811 cups, cupsys -- null ptr dereference
Description:	Anibal Sacco discovered that cups, a general printing system for UNIX systems, suffers from null pointer dereference because of its handling of two consecutive IPP packets with certain tag attributes that are treated as IPP_TAG_UNSUPPORTED tags. This allows unauthenticated attackers to perform denial of service attacks by crashing the cups daemon.
Family:	unix	Class:	patch
Reference(s):	DSA-1811 CVE-2009-0949	Version:	3
Platform(s):	Debian GNU/Linux 5.0 Debian GNU/Linux 4.0	Product(s):	cups cupsys
Definition Synopsis:
Release section Debian GNU/Linux 5.0 is installed AND Architecture section Architecture independent section Installed architecture is all AND Packages section cupsys-bsd is earlier than 1.3.8-1+lenny6 AND cupsys-client is earlier than 1.3.8-1+lenny6 AND libcupsys2-dev is earlier than 1.3.8-1+lenny6 AND cupsys-common is earlier than 1.3.8-1+lenny6 AND cups-common is earlier than 1.3.8-1+lenny6 AND cupsys-dbg is earlier than 1.3.8-1+lenny6 AND cupsys is earlier than 1.3.8-1+lenny6 AND libcupsys2 is earlier than 1.3.8-1+lenny6 OR Architecture dependent section Supported architectures section Installed architecture is s390 AND Installed architecture is amd64 AND Installed architecture is sparc AND Installed architecture is arm AND Installed architecture is i386 AND Installed architecture is armel AND Installed architecture is mips AND Installed architecture is ia64 AND Installed architecture is alpha AND Installed architecture is powerpc AND Installed architecture is mipsel AND Installed architecture is hppa AND Packages section libcups2-dev is earlier than 1.3.8-1+lenny6 AND cups-bsd is earlier than 1.3.8-1+lenny6 AND libcupsimage2-dev is earlier than 1.3.8-1+lenny6 AND libcupsimage2 is earlier than 1.3.8-1+lenny6 AND cups-client is earlier than 1.3.8-1+lenny6 AND libcups2 is earlier than 1.3.8-1+lenny6 AND cups-dbg is earlier than 1.3.8-1+lenny6 AND cups is earlier than 1.3.8-1+lenny6 OR Release section Debian GNU/Linux 4.0 is installed. AND Architecture section Architecture independent section Installed architecture is all AND Packages section libcupsys2-gnutls10 is earlier than 1.2.7-4+etch8 AND cupsys-common is earlier than 1.2.7-4+etch8 AND cupsys-bsd is earlier than 1.2.7-4+etch8 AND cupsys-client is earlier than 1.2.7-4+etch8 AND libcupsys2-dev is earlier than 1.2.7-4+etch8 AND libcupsimage2-dev is earlier than 1.2.7-4+etch8 AND libcupsimage2 is earlier than 1.2.7-4+etch8 AND cupsys-dbg is earlier than 1.2.7-4+etch8 AND cupsys is earlier than 1.2.7-4+etch8 AND libcupsys2 is earlier than 1.2.7-4+etch8

Definition Id: oval:org.mitre.oval:def:9631

Oval ID:	oval:org.mitre.oval:def:9631
Title:	The ippReadIO function in cups/ipp.c in cupsd in CUPS before 1.3.10 does not properly initialize memory for IPP request packets, which allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a scheduler request with two consecutive IPP_TAG_UNSUPPORTED tags.
Description:	The ippReadIO function in cups/ipp.c in cupsd in CUPS before 1.3.10 does not properly initialize memory for IPP request packets, which allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a scheduler request with two consecutive IPP_TAG_UNSUPPORTED tags.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2009-0949	Version:	5
Platform(s):	Red Hat Enterprise Linux 3 CentOS Linux 3 Red Hat Enterprise Linux 4 CentOS Linux 4 Oracle Linux 4 Red Hat Enterprise Linux 5 CentOS Linux 5 Oracle Linux 5	Product(s):
Definition Synopsis:
OS Section: RHEL3, CentOS3 RHEL3 or CentOS3 The operating system installed on the system is Red Hat Enterprise Linux 3 AND CentOS Linux 3.x AND Configuration section cups-devel is earlier than 1:1.1.17-13.3.62 AND cups is earlier than 1:1.1.17-13.3.62 AND cups-libs is earlier than 1:1.1.17-13.3.62 OR OS Section: RHEL4, CentOS4, Oracle Linux 4 RHEL4, CentOS4 or Oracle Linux 4 The operating system installed on the system is Red Hat Enterprise Linux 4 AND CentOS Linux 4.x AND Oracle Linux 4.x AND Configuration section cups-devel is earlier than 1:1.1.22-0.rc1.9.32.el4_8.3 AND cups is earlier than 1:1.1.22-0.rc1.9.32.el4_8.3 AND cups-libs is earlier than 1:1.1.22-0.rc1.9.32.el4_8.3 OR OS Section: RHEL5, CentOS5, Oracle Linux 5 RHEL5, CentOS5 or Oracle Linux 5 The operating system installed on the system is Red Hat Enterprise Linux 5 AND CentOS Linux 5.x AND Oracle Linux 5.x AND Configuration section cups-lpd is earlier than 1:1.3.7-8.el5_3.6 AND cups-devel is earlier than 1:1.3.7-8.el5_3.6 AND cups is earlier than 1:1.3.7-8.el5_3.6 AND cups-libs is earlier than 1:1.3.7-8.el5_3.6

CPE : Common Platform Enumeration

Type	Description	Count
Application	Apple Cups cpe:2.3:a:apple:cups:1.3.9:::::::* cpe:2.3:a:apple:cups:1.3.8:::::::* cpe:2.3:a:apple:cups:1.3.7:::::::* cpe:2.3:a:apple:cups:1.3.6:::::::* cpe:2.3:a:apple:cups:1.3.5:::::::* cpe:2.3:a:apple:cups:1.3.4:::::::* cpe:2.3:a:apple:cups:1.3.3:::::::* cpe:2.3:a:apple:cups:1.3.2:::::::* cpe:2.3:a:apple:cups:1.3.1:::::::* cpe:2.3:a:apple:cups:1.3.0:::::::* cpe:2.3:a:apple:cups:1.3:rc1:::::: cpe:2.3:a:apple:cups:1.3:b1:::::: cpe:2.3:a:apple:cups:1.3:rc2:::::: cpe:2.3:a:apple:cups:1.2.9:::::::* cpe:2.3:a:apple:cups:1.2.8:::::::* cpe:2.3:a:apple:cups:1.2.7:::::::* cpe:2.3:a:apple:cups:1.2.6:::::::* cpe:2.3:a:apple:cups:1.2.5:::::::* cpe:2.3:a:apple:cups:1.2.4:::::::* cpe:2.3:a:apple:cups:1.2.3:::::::* cpe:2.3:a:apple:cups:1.2.2:::::::* cpe:2.3:a:apple:cups:1.2.12:::::::* cpe:2.3:a:apple:cups:1.2.11:::::::* cpe:2.3:a:apple:cups:1.2.10:::::::* cpe:2.3:a:apple:cups:1.2.1:::::::* cpe:2.3:a:apple:cups:1.2.0:::::::* cpe:2.3:a:apple:cups:1.2:b1:::::: cpe:2.3:a:apple:cups:1.2:b2:::::: cpe:2.3:a:apple:cups:1.2:rc3:::::: cpe:2.3:a:apple:cups:1.2:rc2:::::: cpe:2.3:a:apple:cups:1.2:rc1:::::: cpe:2.3:a:apple:cups:1.1.9-1:::::::* cpe:2.3:a:apple:cups:1.1.9:::::::* cpe:2.3:a:apple:cups:1.1.8:::::::* cpe:2.3:a:apple:cups:1.1.7:::::::* cpe:2.3:a:apple:cups:1.1.6-3:::::::* cpe:2.3:a:apple:cups:1.1.6-2:::::::* cpe:2.3:a:apple:cups:1.1.6-1:::::::* cpe:2.3:a:apple:cups:1.1.6:::::::* cpe:2.3:a:apple:cups:1.1.5-2:::::::* cpe:2.3:a:apple:cups:1.1.5-1:::::::* cpe:2.3:a:apple:cups:1.1.5:::::::* cpe:2.3:a:apple:cups:1.1.4:::::::* cpe:2.3:a:apple:cups:1.1.3:::::::* cpe:2.3:a:apple:cups:1.1.23:rc1:::::: cpe:2.3:a:apple:cups:1.1.23:::::::* cpe:2.3:a:apple:cups:1.1.22:::::::* cpe:2.3:a:apple:cups:1.1.22:rc1:::::: cpe:2.3:a:apple:cups:1.1.22:rc2:::::: cpe:2.3:a:apple:cups:1.1.21:rc2:::::: cpe:2.3:a:apple:cups:1.1.21:rc1:::::: cpe:2.3:a:apple:cups:1.1.21:::::::* cpe:2.3:a:apple:cups:1.1.21:-:::::: cpe:2.3:a:apple:cups:1.1.20:rc3:::::: cpe:2.3:a:apple:cups:1.1.20:::::::* cpe:2.3:a:apple:cups:1.1.20:rc5:::::: cpe:2.3:a:apple:cups:1.1.20:rc4:::::: cpe:2.3:a:apple:cups:1.1.20:rc2:::::: cpe:2.3:a:apple:cups:1.1.20:rc1:::::: cpe:2.3:a:apple:cups:1.1.20:rc6:::::: cpe:2.3:a:apple:cups:1.1.2:::::::* cpe:2.3:a:apple:cups:1.1.19:rc1:::::: cpe:2.3:a:apple:cups:1.1.19:rc3:::::: cpe:2.3:a:apple:cups:1.1.19:rc2:::::: cpe:2.3:a:apple:cups:1.1.19:rc5:::::: cpe:2.3:a:apple:cups:1.1.19:rc4:::::: cpe:2.3:a:apple:cups:1.1.19:::::::* cpe:2.3:a:apple:cups:1.1.18:::::::* cpe:2.3:a:apple:cups:1.1.17:::::::* cpe:2.3:a:apple:cups:1.1.16:::::::* cpe:2.3:a:apple:cups:1.1.15:::::::* cpe:2.3:a:apple:cups:1.1.14:::::::* cpe:2.3:a:apple:cups:1.1.13:::::::* cpe:2.3:a:apple:cups:1.1.12:::::::* cpe:2.3:a:apple:cups:1.1.11:::::::* cpe:2.3:a:apple:cups:1.1.10-1:::::::* cpe:2.3:a:apple:cups:1.1.10:::::::* cpe:2.3:a:apple:cups:1.1.1:::::::* cpe:2.3:a:apple:cups:1.1:::::::* cpe:2.3:a:apple:cups:::::::: cpe:2.3:a:apple:cups:-:::::::*	81
Application	Apple Mac Os X cpe:2.3:a:apple:mac_os_x:10.5.6:::::::* cpe:2.3:a:apple:mac_os_x::::::::	2
Os	Apple Mac Os X cpe:2.3:o:apple:mac_os_x:10.5.7:::::::* cpe:2.3:o:apple:mac_os_x:10.5.6:::::::* cpe:2.3:o:apple:mac_os_x:10.5.5:::::::* cpe:2.3:o:apple:mac_os_x:10.5.4:::::::* cpe:2.3:o:apple:mac_os_x:10.5.3:::::::* cpe:2.3:o:apple:mac_os_x:10.5.2:::::::* cpe:2.3:o:apple:mac_os_x:10.5.2:2008-002:::::: cpe:2.3:o:apple:mac_os_x:10.5.1:::::::* cpe:2.3:o:apple:mac_os_x:10.5.0:::::::* cpe:2.3:o:apple:mac_os_x:10.5:::::::* cpe:2.3:o:apple:mac_os_x:10.4.9:::::::* cpe:2.3:o:apple:mac_os_x:10.4.8:::::::* cpe:2.3:o:apple:mac_os_x:10.4.8::macbook::::: cpe:2.3:o:apple:mac_os_x:10.4.8::mac_mini::::: cpe:2.3:o:apple:mac_os_x:10.4.8::macbook_pro::::: cpe:2.3:o:apple:mac_os_x:10.4.7:::::::* cpe:2.3:o:apple:mac_os_x:10.4.6:::::::* cpe:2.3:o:apple:mac_os_x:10.4.5:::::::* cpe:2.3:o:apple:mac_os_x:10.4.4:::::::* cpe:2.3:o:apple:mac_os_x:10.4.3:::::::* cpe:2.3:o:apple:mac_os_x:10.4.2:::::::* cpe:2.3:o:apple:mac_os_x:10.4.11:::::::* cpe:2.3:o:apple:mac_os_x:10.4.10:::::::* cpe:2.3:o:apple:mac_os_x:10.4.1:::::::* cpe:2.3:o:apple:mac_os_x:10.4.0:::::::* cpe:2.3:o:apple:mac_os_x:10.4.:::::::* cpe:2.3:o:apple:mac_os_x:10.4:::::::* cpe:2.3:o:apple:mac_os_x:10.3.9:::::::* cpe:2.3:o:apple:mac_os_x:10.3.8:::::::* cpe:2.3:o:apple:mac_os_x:10.3.7:::::::* cpe:2.3:o:apple:mac_os_x:10.3.6:::::::* cpe:2.3:o:apple:mac_os_x:10.3.5:::::::* cpe:2.3:o:apple:mac_os_x:10.3.4:::::::* cpe:2.3:o:apple:mac_os_x:10.3.3:::::::* cpe:2.3:o:apple:mac_os_x:10.3.2:::::::* cpe:2.3:o:apple:mac_os_x:10.3.1:::::::* cpe:2.3:o:apple:mac_os_x:10.3.0:::::::* cpe:2.3:o:apple:mac_os_x:10.3:::::::* cpe:2.3:o:apple:mac_os_x:10.2.8:::::::* cpe:2.3:o:apple:mac_os_x:10.2.7:::::::* cpe:2.3:o:apple:mac_os_x:10.2.6:::::::* cpe:2.3:o:apple:mac_os_x:10.2.5:::::::* cpe:2.3:o:apple:mac_os_x:10.2.4:::::::* cpe:2.3:o:apple:mac_os_x:10.2.3:::::::* cpe:2.3:o:apple:mac_os_x:10.2.2:::::::* cpe:2.3:o:apple:mac_os_x:10.2.1:::::::* cpe:2.3:o:apple:mac_os_x:10.2.0:::::::* cpe:2.3:o:apple:mac_os_x:10.2:::::::* cpe:2.3:o:apple:mac_os_x:10.1.5:::::::* cpe:2.3:o:apple:mac_os_x:10.1.4:::::::* cpe:2.3:o:apple:mac_os_x:10.1.3:::::::* cpe:2.3:o:apple:mac_os_x:10.1.2:::::::* cpe:2.3:o:apple:mac_os_x:10.1.1:::::::* cpe:2.3:o:apple:mac_os_x:10.1.0:::::::* cpe:2.3:o:apple:mac_os_x:10.1:::::::* cpe:2.3:o:apple:mac_os_x:10.0.4:::::::* cpe:2.3:o:apple:mac_os_x:10.0.3:::::::* cpe:2.3:o:apple:mac_os_x:10.0.2:::::::* cpe:2.3:o:apple:mac_os_x:10.0.1:::::::* cpe:2.3:o:apple:mac_os_x:10.0.0:::::::* cpe:2.3:o:apple:mac_os_x:10.0:::::::* cpe:2.3:o:apple:mac_os_x:::::::: cpe:2.3:o:apple:mac_os_x:-:::::::*	63
Os	Apple Mac Os X Server cpe:2.3:o:apple:mac_os_x_server:10.5.7:::::::* cpe:2.3:o:apple:mac_os_x_server:10.5.6:::::::* cpe:2.3:o:apple:mac_os_x_server:10.5.5:::::::* cpe:2.3:o:apple:mac_os_x_server:10.5.4:::::::* cpe:2.3:o:apple:mac_os_x_server:10.5.3:::::::* cpe:2.3:o:apple:mac_os_x_server:10.5.2:::::::* cpe:2.3:o:apple:mac_os_x_server:10.5.1:::::::* cpe:2.3:o:apple:mac_os_x_server:10.5.0:::::::* cpe:2.3:o:apple:mac_os_x_server:10.5:::::::* cpe:2.3:o:apple:mac_os_x_server:10.4.9:::::::* cpe:2.3:o:apple:mac_os_x_server:10.4.8:::::::* cpe:2.3:o:apple:mac_os_x_server:10.4.7:::::::* cpe:2.3:o:apple:mac_os_x_server:10.4.6:::::::* cpe:2.3:o:apple:mac_os_x_server:10.4.5:::::::* cpe:2.3:o:apple:mac_os_x_server:10.4.4:::::::* cpe:2.3:o:apple:mac_os_x_server:10.4.3:::::::* cpe:2.3:o:apple:mac_os_x_server:10.4.2:::::::* cpe:2.3:o:apple:mac_os_x_server:10.4.11:::::::* cpe:2.3:o:apple:mac_os_x_server:10.4.10:::::::* cpe:2.3:o:apple:mac_os_x_server:10.4.1:::::::* cpe:2.3:o:apple:mac_os_x_server:10.4.0:::::::* cpe:2.3:o:apple:mac_os_x_server:10.4:::::::* cpe:2.3:o:apple:mac_os_x_server:10.3.9:::::::* cpe:2.3:o:apple:mac_os_x_server:10.3.8:::::::* cpe:2.3:o:apple:mac_os_x_server:10.3.7:::::::* cpe:2.3:o:apple:mac_os_x_server:10.3.6:::::::* cpe:2.3:o:apple:mac_os_x_server:10.3.5:::::::* cpe:2.3:o:apple:mac_os_x_server:10.3.4:::::::* cpe:2.3:o:apple:mac_os_x_server:10.3.3:::::::* cpe:2.3:o:apple:mac_os_x_server:10.3.2:::::::* cpe:2.3:o:apple:mac_os_x_server:10.3.1:::::::* cpe:2.3:o:apple:mac_os_x_server:10.3.0:::::::* cpe:2.3:o:apple:mac_os_x_server:10.3:::::::* cpe:2.3:o:apple:mac_os_x_server:10.2.8:::::::* cpe:2.3:o:apple:mac_os_x_server:10.2.7:::::::* cpe:2.3:o:apple:mac_os_x_server:10.2.6:::::::* cpe:2.3:o:apple:mac_os_x_server:10.2.5:::::::* cpe:2.3:o:apple:mac_os_x_server:10.2.4:::::::* cpe:2.3:o:apple:mac_os_x_server:10.2.3:::::::* cpe:2.3:o:apple:mac_os_x_server:10.2.2:::::::* cpe:2.3:o:apple:mac_os_x_server:10.2.1:::::::* cpe:2.3:o:apple:mac_os_x_server:10.2.0:::::::* cpe:2.3:o:apple:mac_os_x_server:10.2:::::::* cpe:2.3:o:apple:mac_os_x_server:10.1.5:::::::* cpe:2.3:o:apple:mac_os_x_server:10.1.4:::::::* cpe:2.3:o:apple:mac_os_x_server:10.1.3:::::::* cpe:2.3:o:apple:mac_os_x_server:10.1.2:::::::* cpe:2.3:o:apple:mac_os_x_server:10.1.1:::::::* cpe:2.3:o:apple:mac_os_x_server:10.1.0:::::::* cpe:2.3:o:apple:mac_os_x_server:10.1:::::::* cpe:2.3:o:apple:mac_os_x_server:10.0.4:::::::* cpe:2.3:o:apple:mac_os_x_server:10.0.3:::::::* cpe:2.3:o:apple:mac_os_x_server:10.0.2:::::::* cpe:2.3:o:apple:mac_os_x_server:10.0.1:::::::* cpe:2.3:o:apple:mac_os_x_server:10.0.0:::::::* cpe:2.3:o:apple:mac_os_x_server:10.0:::::::* cpe:2.3:o:apple:mac_os_x_server:5.0.3:::::::* cpe:2.3:o:apple:mac_os_x_server:5.0.2:::::::* cpe:2.3:o:apple:mac_os_x_server:5.0.15:::::::* cpe:2.3:o:apple:mac_os_x_server:5.0.14:::::::* cpe:2.3:o:apple:mac_os_x_server::::::::	61
Os	Canonical Ubuntu Linux cpe:2.3:o:canonical:ubuntu_linux:9.04:::::::* cpe:2.3:o:canonical:ubuntu_linux:8.10:::::::* cpe:2.3:o:canonical:ubuntu_linux:8.04::::-::: cpe:2.3:o:canonical:ubuntu_linux:6.06:::::::*	4
Os	Debian Debian Linux cpe:2.3:o:debian:debian_linux:6.0:::::::* cpe:2.3:o:debian:debian_linux:5.0:::::::* cpe:2.3:o:debian:debian_linux:4.0:::::::*	3
Os	Opensuse cpe:2.3:o:opensuse:opensuse:10.3:::::::*	1
Os	Suse Linux Enterprise cpe:2.3:o:suse:linux_enterprise:10.0:-:::::: cpe:2.3:o:suse:linux_enterprise:9.0:-::::::	2

OpenVAS Exploits

Date	Description
2011-11-18	Name : Mandriva Update for poppler MDVSA-2011:175 (poppler) File : nvt/gb_mandriva_MDVSA_2011_175.nasl
2011-08-09	Name : CentOS Update for tetex CESA-2010:0400 centos5 i386 File : nvt/gb_CESA-2010_0400_tetex_centos5_i386.nasl
2011-08-09	Name : CentOS Update for kdegraphics CESA-2009:1512 centos4 i386 File : nvt/gb_CESA-2009_1512_kdegraphics_centos4_i386.nasl
2011-08-09	Name : CentOS Update for gpdf CESA-2009:1503 centos4 i386 File : nvt/gb_CESA-2009_1503_gpdf_centos4_i386.nasl
2011-08-09	Name : CentOS Update for kdegraphics CESA-2009:1502 centos5 i386 File : nvt/gb_CESA-2009_1502_kdegraphics_centos5_i386.nasl
2011-08-09	Name : CentOS Update for cups CESA-2009:1082 centos5 i386 File : nvt/gb_CESA-2009_1082_cups_centos5_i386.nasl
2011-08-09	Name : CentOS Update for cups CESA-2009:1083 centos3 i386 File : nvt/gb_CESA-2009_1083_cups_centos3_i386.nasl
2011-08-09	Name : CentOS Update for xpdf CESA-2009:1500 centos3 i386 File : nvt/gb_CESA-2009_1500_xpdf_centos3_i386.nasl
2011-08-09	Name : CentOS Update for xpdf CESA-2009:1501 centos4 i386 File : nvt/gb_CESA-2009_1501_xpdf_centos4_i386.nasl
2010-05-17	Name : CentOS Update for tetex CESA-2010:0401 centos3 i386 File : nvt/gb_CESA-2010_0401_tetex_centos3_i386.nasl
2010-05-17	Name : CentOS Update for tetex CESA-2010:0399 centos4 i386 File : nvt/gb_CESA-2010_0399_tetex_centos4_i386.nasl
2010-05-12	Name : Mac OS X Security Update 2009-005 File : nvt/macosx_secupd_2009-005.nasl
2010-05-07	Name : RedHat Update for tetex RHSA-2010:0399-01 File : nvt/gb_RHSA-2010_0399-01_tetex.nasl
2010-05-07	Name : RedHat Update for tetex RHSA-2010:0400-01 File : nvt/gb_RHSA-2010_0400-01_tetex.nasl
2010-05-07	Name : RedHat Update for tetex RHSA-2010:0401-01 File : nvt/gb_RHSA-2010_0401-01_tetex.nasl
2010-03-12	Name : Mandriva Update for poppler MDVSA-2010:055 (poppler) File : nvt/gb_mandriva_MDVSA_2010_055.nasl
2009-12-30	Name : Mandriva Security Advisory MDVSA-2009:334 (poppler) File : nvt/mdksa_2009_334.nasl
2009-12-14	Name : Mandriva Security Advisory MDVSA-2009:331 (kdegraphics) File : nvt/mdksa_2009_331.nasl
2009-12-14	Name : Mandriva Security Advisory MDVSA-2009:282-1 (cups) File : nvt/mdksa_2009_282_1.nasl
2009-11-11	Name : CentOS Security Advisory CESA-2009:1502 (kdegraphics) File : nvt/ovcesa2009_1502.nasl
2009-10-27	Name : Mandrake Security Advisory MDVSA-2009:282 (cups) File : nvt/mdksa_2009_282.nasl
2009-10-27	Name : Mandrake Security Advisory MDVSA-2009:281 (cups) File : nvt/mdksa_2009_281.nasl
2009-10-27	Name : Mandrake Security Advisory MDVSA-2009:283 (cups) File : nvt/mdksa_2009_283.nasl
2009-10-19	Name : CentOS Security Advisory CESA-2009:1500 (xpdf) File : nvt/ovcesa2009_1500.nasl
2009-10-19	Name : CentOS Security Advisory CESA-2009:1501 (xpdf) File : nvt/ovcesa2009_1501.nasl
2009-10-19	Name : CentOS Security Advisory CESA-2009:1503 (gpdf) File : nvt/ovcesa2009_1503.nasl
2009-10-19	Name : CentOS Security Advisory CESA-2009:1512 (kdegraphics) File : nvt/ovcesa2009_1512.nasl
2009-10-19	Name : RedHat Security Advisory RHSA-2009:1512 File : nvt/RHSA_2009_1512.nasl
2009-10-19	Name : RedHat Security Advisory RHSA-2009:1503 File : nvt/RHSA_2009_1503.nasl
2009-10-19	Name : RedHat Security Advisory RHSA-2009:1502 File : nvt/RHSA_2009_1502.nasl
2009-10-19	Name : RedHat Security Advisory RHSA-2009:1501 File : nvt/RHSA_2009_1501.nasl
2009-10-19	Name : RedHat Security Advisory RHSA-2009:1500 File : nvt/RHSA_2009_1500.nasl
2009-10-13	Name : SLES10: Security update for xpdf File : nvt/sles10_xpdf0.nasl
2009-10-13	Name : SLES10: Security update for CUPS File : nvt/sles10_cups2.nasl
2009-10-11	Name : SLES11: Security update for xpdf File : nvt/sles11_xpdf-tools.nasl
2009-10-10	Name : SLES9: Security update for CUPS File : nvt/sles9p5051582.nasl
2009-09-09	Name : SuSE Security Summary SUSE-SR:2009:014 File : nvt/suse_sr_2009_014.nasl
2009-07-06	Name : SuSE Security Summary SUSE-SR:2009:012 File : nvt/suse_sr_2009_012.nasl
2009-06-16	Name : CUPS Denial of Service Vulnerability - Jun09 File : nvt/gb_cups_dos_vuln_jun09.nasl
2009-06-15	Name : CentOS Security Advisory CESA-2009:1082 (cups) File : nvt/ovcesa2009_1082.nasl
2009-06-05	Name : Ubuntu USN-780-1 (cupsys) File : nvt/ubuntu_780_1.nasl
2009-06-05	Name : RedHat Security Advisory RHSA-2009:1082 File : nvt/RHSA_2009_1082.nasl
2009-06-05	Name : CentOS Security Advisory CESA-2009:1083 (cups) File : nvt/ovcesa2009_1083.nasl
2009-06-05	Name : Debian Security Advisory DSA 1810-1 (cups, cupsys) File : nvt/deb_1810_1.nasl
2009-06-05	Name : RedHat Security Advisory RHSA-2009:1083 File : nvt/RHSA_2009_1083.nasl
2009-06-04	Name : CUPS IPP Packets Processing Denial of Service Vulnerability File : nvt/gb_cups_ipp_dos_vuln.nasl

Open Source Vulnerability Database (OSVDB)

Id	Description
59824	Poppler pdftops Filter PDF File Handling Multiple Unspecified Overflows
56176	CUPS pdftops Filter PDF File Handling Multiple Unspecified Overflows
55032	CUPS Scheduler Directory-services Functionality Browse Packet Timing Remote DoS
55002	CUPS cupsd cups/ipp.c ippReadIO Function IPP Packet Handling Remote DoS

Nessus® Vulnerability Scanner

Date	Description
2013-07-12	Name : The remote Oracle Linux host is missing a security update. File : oraclelinux_ELSA-2009-1501.nasl - Type : ACT_GATHER_INFO
2013-07-12	Name : The remote Oracle Linux host is missing a security update. File : oraclelinux_ELSA-2009-1500.nasl - Type : ACT_GATHER_INFO
2013-07-12	Name : The remote Oracle Linux host is missing one or more security updates. File : oraclelinux_ELSA-2009-1083.nasl - Type : ACT_GATHER_INFO
2013-07-12	Name : The remote Oracle Linux host is missing one or more security updates. File : oraclelinux_ELSA-2009-1082.nasl - Type : ACT_GATHER_INFO
2013-07-12	Name : The remote Oracle Linux host is missing one or more security updates. File : oraclelinux_ELSA-2009-0480.nasl - Type : ACT_GATHER_INFO
2013-07-12	Name : The remote Oracle Linux host is missing a security update. File : oraclelinux_ELSA-2009-1503.nasl - Type : ACT_GATHER_INFO
2013-07-12	Name : The remote Oracle Linux host is missing one or more security updates. File : oraclelinux_ELSA-2009-1512.nasl - Type : ACT_GATHER_INFO
2013-07-12	Name : The remote Oracle Linux host is missing one or more security updates. File : oraclelinux_ELSA-2010-0399.nasl - Type : ACT_GATHER_INFO
2013-07-12	Name : The remote Oracle Linux host is missing one or more security updates. File : oraclelinux_ELSA-2010-0400.nasl - Type : ACT_GATHER_INFO
2013-07-12	Name : The remote Oracle Linux host is missing one or more security updates. File : oraclelinux_ELSA-2010-0401.nasl - Type : ACT_GATHER_INFO
2012-08-01	Name : The remote Scientific Linux host is missing one or more security updates. File : sl_20100506_tetex_on_SL5_x.nasl - Type : ACT_GATHER_INFO
2012-08-01	Name : The remote Scientific Linux host is missing one or more security updates. File : sl_20100506_tetex_on_SL4_x.nasl - Type : ACT_GATHER_INFO
2012-08-01	Name : The remote Scientific Linux host is missing one or more security updates. File : sl_20100506_tetex_on_SL3_x.nasl - Type : ACT_GATHER_INFO
2012-08-01	Name : The remote Scientific Linux host is missing a security update. File : sl_20091015_xpdf_on_SL3_x.nasl - Type : ACT_GATHER_INFO
2012-08-01	Name : The remote Scientific Linux host is missing one or more security updates. File : sl_20091015_kdegraphics_on_SL4_x.nasl - Type : ACT_GATHER_INFO
2012-08-01	Name : The remote Scientific Linux host is missing a security update. File : sl_20091015_gpdf_on_SL4_x.nasl - Type : ACT_GATHER_INFO
2012-08-01	Name : The remote Scientific Linux host is missing one or more security updates. File : sl_20090603_cups_on_SL3_x.nasl - Type : ACT_GATHER_INFO
2010-06-01	Name : The remote CentOS host is missing one or more security updates. File : centos_RHSA-2010-0400.nasl - Type : ACT_GATHER_INFO
2010-05-11	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2010-0401.nasl - Type : ACT_GATHER_INFO
2010-05-11	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2010-0399.nasl - Type : ACT_GATHER_INFO
2010-05-11	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2010-0400.nasl - Type : ACT_GATHER_INFO
2010-05-10	Name : The remote CentOS host is missing one or more security updates. File : centos_RHSA-2010-0401.nasl - Type : ACT_GATHER_INFO
2010-05-10	Name : The remote CentOS host is missing one or more security updates. File : centos_RHSA-2010-0399.nasl - Type : ACT_GATHER_INFO
2010-03-08	Name : The remote Mandriva Linux host is missing one or more security updates. File : mandriva_MDVSA-2010-055.nasl - Type : ACT_GATHER_INFO
2010-01-12	Name : The remote openSUSE host is missing a security update. File : suse_11_2_libpoppler-devel-100111.nasl - Type : ACT_GATHER_INFO
2010-01-06	Name : The remote CentOS host is missing one or more security updates. File : centos_RHSA-2009-1512.nasl - Type : ACT_GATHER_INFO
2010-01-06	Name : The remote CentOS host is missing one or more security updates. File : centos_RHSA-2009-0480.nasl - Type : ACT_GATHER_INFO
2010-01-06	Name : The remote CentOS host is missing a security update. File : centos_RHSA-2009-1503.nasl - Type : ACT_GATHER_INFO
2010-01-06	Name : The remote CentOS host is missing one or more security updates. File : centos_RHSA-2009-1502.nasl - Type : ACT_GATHER_INFO
2010-01-06	Name : The remote CentOS host is missing a security update. File : centos_RHSA-2009-1501.nasl - Type : ACT_GATHER_INFO
2010-01-06	Name : The remote CentOS host is missing one or more security updates. File : centos_RHSA-2009-1082.nasl - Type : ACT_GATHER_INFO
2010-01-03	Name : The remote openSUSE host is missing a security update. File : suse_11_0_libpoppler-devel-091223.nasl - Type : ACT_GATHER_INFO
2010-01-03	Name : The remote openSUSE host is missing a security update. File : suse_11_1_libpoppler-devel-091222.nasl - Type : ACT_GATHER_INFO
2010-01-03	Name : The remote SuSE system is missing a security patch for libpoppler-devel File : suse_11_2_libpoppler-devel-091222.nasl - Type : ACT_GATHER_INFO
2010-01-03	Name : The remote SuSE 11 host is missing one or more security updates. File : suse_11_libpoppler-devel-091221.nasl - Type : ACT_GATHER_INFO
2009-10-20	Name : The remote Mandriva Linux host is missing one or more security updates. File : mandriva_MDVSA-2009-282.nasl - Type : ACT_GATHER_INFO
2009-10-16	Name : The remote Red Hat host is missing a security update. File : redhat-RHSA-2009-1500.nasl - Type : ACT_GATHER_INFO
2009-10-16	Name : The remote Red Hat host is missing a security update. File : redhat-RHSA-2009-1503.nasl - Type : ACT_GATHER_INFO
2009-10-16	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2009-1502.nasl - Type : ACT_GATHER_INFO
2009-10-16	Name : The remote Red Hat host is missing a security update. File : redhat-RHSA-2009-1501.nasl - Type : ACT_GATHER_INFO
2009-10-16	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2009-1512.nasl - Type : ACT_GATHER_INFO
2009-10-16	Name : The remote CentOS host is missing a security update. File : centos_RHSA-2009-1500.nasl - Type : ACT_GATHER_INFO
2009-10-06	Name : The remote openSUSE host is missing a security update. File : suse_xpdf-6376.nasl - Type : ACT_GATHER_INFO
2009-09-24	Name : The remote SuSE 10 host is missing a security-related patch. File : suse_xpdf-6378.nasl - Type : ACT_GATHER_INFO
2009-09-24	Name : The remote SuSE 9 host is missing a security-related patch. File : suse9_12434.nasl - Type : ACT_GATHER_INFO
2009-09-24	Name : The remote SuSE 10 host is missing a security-related patch. File : suse_cups-6279.nasl - Type : ACT_GATHER_INFO
2009-09-24	Name : The remote SuSE 11 host is missing a security update. File : suse_11_xpdf-090727.nasl - Type : ACT_GATHER_INFO
2009-09-11	Name : The remote host is missing a Mac OS X update that fixes various security issues. File : macosx_SecUpd2009-005.nasl - Type : ACT_GATHER_INFO
2009-08-27	Name : The remote openSUSE host is missing a security update. File : suse_11_0_xpdf-090727.nasl - Type : ACT_GATHER_INFO
2009-08-27	Name : The remote openSUSE host is missing a security update. File : suse_11_1_xpdf-090727.nasl - Type : ACT_GATHER_INFO
2009-06-15	Name : The remote openSUSE host is missing a security update. File : suse_cups-6285.nasl - Type : ACT_GATHER_INFO
2009-06-04	Name : The remote Ubuntu host is missing one or more security-related patches. File : ubuntu_USN-780-1.nasl - Type : ACT_GATHER_INFO
2009-06-04	Name : The remote CentOS host is missing one or more security updates. File : centos_RHSA-2009-1083.nasl - Type : ACT_GATHER_INFO
2009-06-04	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2009-1082.nasl - Type : ACT_GATHER_INFO
2009-06-04	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2009-1083.nasl - Type : ACT_GATHER_INFO
2009-06-03	Name : The remote Debian host is missing a security-related update. File : debian_DSA-1811.nasl - Type : ACT_GATHER_INFO
2009-05-14	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2009-0480.nasl - Type : ACT_GATHER_INFO
2009-04-17	Name : The remote printer service is affected by multiple vulnerabilities. File : cups_1_3_10.nasl - Type : ACT_GATHER_INFO

Alert History

If you want to see full details history, please login or register.

Date	Informations
2014-02-17 11:52:34	Multiple Updates

Global Informations

Type	Count
CWE ID(s)	2
Oval ID(s)	8
CPE ID(s)	217
osvdb(s)	4
Openvas Exploit(s)	46
Nessus® Exploit(s)	58

	Related
7.5	CVE-2009-0949
6.8	CVE-2009-0791
5	CVE-2009-1196
Info : listing not affected by your CVSS Env Score

Same Subject	Severity
Login to view 3 more Alert(s)