The cgi_initialize_string function in cgi-bin/var.c in the web interface in CUPS before 1.4.4, as used on Apple Mac OS X 10.5.8, Mac OS X 10.6 before 10.6.4, and other platforms, does not properly handle parameter values containing a % (percent) character without two subsequent hex characters, which allows context-dependent attackers to obtain sensitive information from cupsd process memory via a crafted request, as demonstrated by the (1) /admin?OP=redirect&URL=% and (2) /admin?URL=/admin/&OP=% URIs.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Apple Osx Cups | — | Upgrade macOS to the latest versionApply OS X security update 2010-004 | Dec 16, 2011 | Jun 17, 2010 |
| Centos_linux | — | Upgrade cups-lpdUpgrade cups-develUpgrade cupsUpgrade cups-libs | Dec 1, 2016 | Jun 17, 2010 |
| Debian | — | Upgrade cups | Jul 30, 2024 | Jun 17, 2010 |
| Gentoo Linux | — | Upgrade net-print/cups. | Oct 30, 2017 | Jun 17, 2010 |
| Oracle_linux | — | Upgrade cups-lpdUpgrade cups-develUpgrade cupsUpgrade cups-libs | Oct 16, 2024 | Jun 17, 2010 |
| Suse | — | Upgrade cups-develUpgrade libcupsimage2Upgrade cups-clientUpgrade libcups2Upgrade cups-libs-x86Upgrade cups-configUpgrade cups-libs-32bitUpgrade libcupsppdc1Upgrade cupsUpgrade cups154Upgrade cups-ddkUpgrade cups154-filtersUpgrade libcups2-32bitUpgrade libcupscgi1Upgrade cups154-clientUpgrade cups-libsUpgrade cups154-libsUpgrade libcupsmime1 | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade cupsysUpgrade cups | Nov 8, 2024 | Jun 17, 2010 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub