Signature Detail
This site is deprecated. Please CLICK HERE for latest updates
Short Name |
APP:CUPS:APPLE-DOSELECT |
|---|---|
Severity |
Major |
Recommended |
No |
Recommended Action |
Drop |
Category |
APP |
Keywords |
Apple CUPS cupsdDoSelect Remote Code Execution |
Release Date |
2010/10/13 |
Update Number |
1791 |
Supported Platforms |
idp-4.0+, isg-3.0+, j-series-9.5+, mx-11.4+, srx-12.1+, srx-branch-12.1+, vmx-17.4+, vsrx-12.1+, vsrx3bsd-18.2+ |
APP: Apple CUPS cupsdDoSelect Remote Code Execution
This signature detects attempts to exploit a known code execution vulnerability in Apple CUPS. It is due to a use-after-free error within cupsdDoSelect function. Remote attackers can exploit this vulnerability by sending a malicious request to the target. A successful attack can allow arbitrary code execution.
Extended Description
CUPS is prone to a denial-of-service vulnerability. A remote attacker can exploit this issue to crash the affected application, denying service to legitimate users. This issue affects CUPS 1.3.7; other versions may be vulnerable as well.
Affected Products
- Apple mac_os_x 10.4.0
- Apple mac_os_x 10.4.1
- Apple mac_os_x 10.4.10
- Apple mac_os_x 10.4.11
- Apple mac_os_x 10.4.2
- Apple mac_os_x 10.4.3
- Apple mac_os_x 10.4.4
- Apple mac_os_x 10.4.5
- Apple mac_os_x 10.4.6
- Apple mac_os_x 10.4.7
- Apple mac_os_x 10.4.8
- Apple mac_os_x 10.4.9
- Apple mac_os_x 10.5
- Apple mac_os_x 10.5.1
- Apple mac_os_x 10.5.2
- Apple mac_os_x 10.5.3
- Apple mac_os_x 10.5.4
- Apple mac_os_x 10.5.5
- Apple mac_os_x 10.5.6
- Apple mac_os_x 10.5.7
- Apple mac_os_x 10.5.8
- Apple mac_os_x 10.6
- Apple mac_os_x 10.6.1
- Apple mac_os_x 10.6.2
- Apple mac_os_x_server 10.4.0
- Apple mac_os_x_server 10.4.1
- Apple mac_os_x_server 10.4.10
- Apple mac_os_x_server 10.4.11
- Apple mac_os_x_server 10.4.2
- Apple mac_os_x_server 10.4.3
- Apple mac_os_x_server 10.4.4
- Apple mac_os_x_server 10.4.5
- Apple mac_os_x_server 10.4.6
- Apple mac_os_x_server 10.4.7
- Apple mac_os_x_server 10.4.8
- Apple mac_os_x_server 10.4.9
- Apple mac_os_x_server 10.5
- Apple mac_os_x_server 10.5.1
- Apple mac_os_x_server 10.5.2
- Apple mac_os_x_server 10.5.3
- Apple mac_os_x_server 10.5.4
- Apple mac_os_x_server 10.5.5
- Apple mac_os_x_server 10.5.6
- Apple mac_os_x_server 10.5.7
- Apple mac_os_x_server 10.5.8
- Apple mac_os_x_server 10.6
- Apple mac_os_x_server 10.6.1
- Apple mac_os_x_server 10.6.2
- Avaya aura_session_manager 1.1
- Avaya aura_session_manager 5.2
- Avaya aura_system_platform SP1.1
- Debian linux 5.0
- Debian linux 5.0 Alpha
- Debian linux 5.0 Amd64
- Debian linux 5.0 Arm
- Debian linux 5.0 Armel
- Debian linux 5.0 Hppa
- Debian linux 5.0 Ia-32
- Debian linux 5.0 Ia-64
- Debian linux 5.0 M68k
- Debian linux 5.0 Mips
- Debian linux 5.0 Mipsel
- Debian linux 5.0 Powerpc
- Debian linux 5.0 S/390
- Debian linux 5.0 Sparc
- Easy_software_products cups 1.3.7
- Gentoo linux
- Mandriva enterprise_server 5
- Mandriva enterprise_server 5 X86 64
- Mandriva linux_mandrake 2008.0
- Mandriva linux_mandrake 2008.0 X86 64
- Mandriva linux_mandrake 2009.0
- Mandriva linux_mandrake 2009.0 X86 64
- Mandriva linux_mandrake 2009.1
- Mandriva linux_mandrake 2009.1 X86 64
- Mandriva linux_mandrake 2010.0
- Mandriva linux_mandrake 2010.0 X86 64
- Pardus linux_2009
- Red_hat enterprise_linux 5 Server
- Red_hat enterprise_linux_desktop 5 Client
- Red_hat enterprise_linux_desktop_workstation 5 Client
- Red_hat fedora 10
- Red_hat fedora 11
- Red_hat fedora 12
- Red_hat fedora 13
- Sun opensolaris Build Snv 100
- Sun opensolaris Build Snv 101
- Sun opensolaris Build Snv 101A
- Sun opensolaris Build Snv 102
- Sun opensolaris Build Snv 103
- Sun opensolaris Build Snv 104
- Sun opensolaris Build Snv 105
- Sun opensolaris Build Snv 106
- Sun opensolaris Build Snv 107
- Sun opensolaris Build Snv 108
- Sun opensolaris Build Snv 109
- Sun opensolaris Build Snv 110
- Sun opensolaris Build Snv 111
- Sun opensolaris Build Snv 111A
- Sun opensolaris Build Snv 112
- Sun opensolaris Build Snv 113
- Sun opensolaris Build Snv 114
- Sun opensolaris Build Snv 115
- Sun opensolaris Build Snv 116
- Sun opensolaris Build Snv 117
- Sun opensolaris Build Snv 118
- Sun opensolaris Build Snv 119
- Sun opensolaris Build Snv 120
- Sun opensolaris Build Snv 121
- Sun opensolaris Build Snv 122
- Sun opensolaris Build Snv 123
- Sun opensolaris Build Snv 124
- Sun opensolaris Build Snv 125
- Sun opensolaris Build Snv 126
- Sun opensolaris Build Snv 127
- Sun opensolaris Build Snv 128
- Sun opensolaris Build Snv 129
- Sun opensolaris Build Snv 130
- Sun opensolaris Build Snv 87
- Sun opensolaris Build Snv 88
- Sun opensolaris Build Snv 89
- Sun opensolaris Build Snv 90
- Sun opensolaris Build Snv 91
- Sun opensolaris Build Snv 92
- Sun opensolaris Build Snv 93
- Sun opensolaris Build Snv 94
- Sun opensolaris Build Snv 95
- Sun opensolaris Build Snv 96
- Sun opensolaris Build Snv 98
- Sun opensolaris Build Snv 99
- Suse linux_enterprise_server_for_s/390 9.0.0
- Suse moblin 2.0
- Suse moblin 2.1
- Suse novell_linux_desktop 1.0.0
- Suse novell_linux_desktop 9.0.0
- Suse open-enterprise-server 1
- Suse open-enterprise-server 9.0.0
- Suse open-enterprise-server
- Suse opensuse 11.0
- Suse opensuse 11.1
- Suse opensuse 11.2
- Suse suse_linux_enterprise 11
- Suse suse_linux_enterprise_desktop 10 SP2
- Suse suse_linux_enterprise_desktop 10 SP3
- Suse suse_linux_enterprise_server 10 SP2
- Suse suse_linux_enterprise_server 10 SP3
- Suse suse_linux_enterprise_server 9
References
- BugTraq: 37048
- CVE: CVE-2009-3553