Signature Detail

APP: CUPS cups/ipp.c NULL Pointer Dereference Denial Of Service

This signature detects attempts to exploit a known vulnerability against CUPS. A successful attack can result in a denial-of-service condition.

Extended Description

CUPS is prone to a denial-of-service vulnerability because of a NULL-pointer dereference that occurs when processing two consecutive IPP_TAG_UNSUPPORTED tags in specially crafted IPP (Internet Printing Protocal) packets. An attacker can exploit this issue to crash the affected application, denying service to legitimate users.

Affected Products

• Apple mac_os_x 10.4.0
• Apple mac_os_x 10.4.1
• Apple mac_os_x 10.4.10
• Apple mac_os_x 10.4.11
• Apple mac_os_x 10.4.2
• Apple mac_os_x 10.4.3
• Apple mac_os_x 10.4.4
• Apple mac_os_x 10.4.5
• Apple mac_os_x 10.4.6
• Apple mac_os_x 10.4.7
• Apple mac_os_x 10.4.8
• Apple mac_os_x 10.4.9
• Apple mac_os_x 10.5
• Apple mac_os_x 10.5.1
• Apple mac_os_x 10.5.2
• Apple mac_os_x 10.5.3
• Apple mac_os_x 10.5.4
• Apple mac_os_x 10.5.5
• Apple mac_os_x 10.5.6
• Apple mac_os_x 10.5.7
• Apple mac_os_x 10.5.8
• Apple mac_os_x_server 10.4.0
• Apple mac_os_x_server 10.4.1
• Apple mac_os_x_server 10.4.10
• Apple mac_os_x_server 10.4.11
• Apple mac_os_x_server 10.4.2
• Apple mac_os_x_server 10.4.3
• Apple mac_os_x_server 10.4.4
• Apple mac_os_x_server 10.4.5
• Apple mac_os_x_server 10.4.6
• Apple mac_os_x_server 10.4.7
• Apple mac_os_x_server 10.4.8
• Apple mac_os_x_server 10.4.9
• Apple mac_os_x_server 10.5
• Apple mac_os_x_server 10.5.1
• Apple mac_os_x_server 10.5.2
• Apple mac_os_x_server 10.5.3
• Apple mac_os_x_server 10.5.4
• Apple mac_os_x_server 10.5.5
• Apple mac_os_x_server 10.5.6
• Apple mac_os_x_server 10.5.7
• Apple mac_os_x_server 10.5.8
• Avaya aura_session_manager 1.1
• Avaya intuity_audix_lx 1.0
• Avaya intuity_audix_lx 2.0
• Avaya intuity_audix_lx 2.0 SP1
• Avaya intuity_audix_lx 2.0 SP2
• Avaya intuity_audix_r5
• Avaya proactive_contact 4.0
• Avaya proactive_contact 4.1
• Debian linux 4.0
• Debian linux 4.0 Alpha
• Debian linux 4.0 Amd64
• Debian linux 4.0 Arm
• Debian linux 4.0 Armel
• Debian linux 4.0 Hppa
• Debian linux 4.0 Ia-32
• Debian linux 4.0 Ia-64
• Debian linux 4.0 M68k
• Debian linux 4.0 Mips
• Debian linux 4.0 Mipsel
• Debian linux 4.0 Powerpc
• Debian linux 4.0 S/390
• Debian linux 4.0 Sparc
• Debian linux 5.0
• Debian linux 5.0 Alpha
• Debian linux 5.0 Amd64
• Debian linux 5.0 Arm
• Debian linux 5.0 Armel
• Debian linux 5.0 Hppa
• Debian linux 5.0 Ia-32
• Debian linux 5.0 Ia-64
• Debian linux 5.0 M68k
• Debian linux 5.0 Mips
• Debian linux 5.0 Mipsel
• Debian linux 5.0 Powerpc
• Debian linux 5.0 S/390
• Debian linux 5.0 Sparc
• Easy_software_products cups 1.0.4
• Easy_software_products cups 1.0.4 -8
• Easy_software_products cups 1.1.1
• Easy_software_products cups 1.1.10
• Easy_software_products cups 1.1.12
• Easy_software_products cups 1.1.13
• Easy_software_products cups 1.1.14
• Easy_software_products cups 1.1.15
• Easy_software_products cups 1.1.16
• Easy_software_products cups 1.1.17
• Easy_software_products cups 1.1.18
• Easy_software_products cups 1.1.19
• Easy_software_products cups 1.1.19 Rc5
• Easy_software_products cups 1.1.20
• Easy_software_products cups 1.1.21
• Easy_software_products cups 1.1.22
• Easy_software_products cups 1.1.22 Rc1
• Easy_software_products cups 1.1.23
• Easy_software_products cups 1.1.23 Rc1
• Easy_software_products cups 1.1.4
• Easy_software_products cups 1.1.4 -2
• Easy_software_products cups 1.1.4 -3
• Easy_software_products cups 1.1.4 -5
• Easy_software_products cups 1.1.6
• Easy_software_products cups 1.1.7
• Easy_software_products cups 1.2.10
• Easy_software_products cups 1.2.12
• Easy_software_products cups 1.2.2
• Easy_software_products cups 1.2.4
• Easy_software_products cups 1.2.8
• Easy_software_products cups 1.2.9
• Easy_software_products cups 1.3.2
• Easy_software_products cups 1.3.3
• Easy_software_products cups 1.3.5
• Easy_software_products cups 1.3.6
• Easy_software_products cups 1.3.7
• Easy_software_products cups 1.3.8
• Easy_software_products cups 1.3.9
• Mandriva corporate_server 3.0.0
• Mandriva corporate_server 3.0.0 X86 64
• Mandriva corporate_server 4.0
• Mandriva corporate_server 4.0.0 X86 64
• Mandriva enterprise_server 5
• Mandriva enterprise_server 5 X86 64
• Mandriva linux_mandrake 2008.0
• Mandriva linux_mandrake 2008.0 X86 64
• Mandriva linux_mandrake 2009.0
• Mandriva linux_mandrake 2009.0 X86 64
• Mandriva multi_network_firewall 2.0.0
• Red_hat desktop 3.0.0
• Red_hat enterprise_linux 5 Server
• Red_hat enterprise_linux Desktop Version 4
• Red_hat enterprise_linux_as 3
• Red_hat enterprise_linux_as 4
• Red_hat enterprise_linux_desktop 5 Client
• Red_hat enterprise_linux_desktop_workstation 5 Client
• Red_hat enterprise_linux_es 3
• Red_hat enterprise_linux_es 4
• Red_hat enterprise_linux_ws 3
• Red_hat enterprise_linux_ws 4
• Suse opensuse 10.3
• Suse suse_linux_enterprise_desktop 10
• Suse suse_linux_enterprise_desktop 10 SP1
• Suse suse_linux_enterprise_desktop 10 SP2
• Suse suse_linux_enterprise_server 10
• Suse suse_linux_enterprise_server 10 SP1
• Suse suse_linux_enterprise_server 10 SP2
• Suse suse_linux_enterprise_server 9
• Suse suse_linux_enterprise_server 9 SP3
• Ubuntu ubuntu_linux 6.06 LTS Amd64
• Ubuntu ubuntu_linux 6.06 LTS I386
• Ubuntu ubuntu_linux 6.06 LTS Powerpc
• Ubuntu ubuntu_linux 6.06 LTS Sparc
• Ubuntu ubuntu_linux 8.04 LTS Amd64
• Ubuntu ubuntu_linux 8.04 LTS I386
• Ubuntu ubuntu_linux 8.04 LTS Lpia
• Ubuntu ubuntu_linux 8.04 LTS Powerpc
• Ubuntu ubuntu_linux 8.04 LTS Sparc
• Ubuntu ubuntu_linux 8.10 Amd64
• Ubuntu ubuntu_linux 8.10 I386
• Ubuntu ubuntu_linux 8.10 Lpia
• Ubuntu ubuntu_linux 8.10 Powerpc
• Ubuntu ubuntu_linux 8.10 Sparc
• Ubuntu ubuntu_linux 9.04 Amd64
• Ubuntu ubuntu_linux 9.04 I386
• Ubuntu ubuntu_linux 9.04 Lpia
• Ubuntu ubuntu_linux 9.04 Powerpc
• Ubuntu ubuntu_linux 9.04 Sparc

References

• BugTraq: 35169
• CVE: CVE-2009-0949