Lucene search

[email protected]CVE-2005-2874

HistorySep 13, 2005 - 10:03 p.m.

CVE-2005-2874

2005-09-1322:03:00

[email protected]

web.nvd.nist.gov

cups

denial of service

http request

security vulnerability

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

6.2 Medium

AI Score

Confidence

Low

0.119 Low

EPSS

Percentile

95.3%

JSON

The is_path_absolute function in scheduler/client.c for the daemon in CUPS before 1.1.23 allows remote attackers to cause a denial of service (CPU consumption by tight loop) via a “…..” URL in an HTTP request.

Affected configurations

NVD

Node

easy_software_productscupsMatch1.1

easy_software_productscupsMatch1.1.1

easy_software_productscupsMatch1.1.2

easy_software_productscupsMatch1.1.3

easy_software_productscupsMatch1.1.4

easy_software_productscupsMatch1.1.5

easy_software_productscupsMatch1.1.5_1

easy_software_productscupsMatch1.1.5_2

easy_software_productscupsMatch1.1.6

easy_software_productscupsMatch1.1.6_1

easy_software_productscupsMatch1.1.6_2

easy_software_productscupsMatch1.1.6_3

easy_software_productscupsMatch1.1.7

easy_software_productscupsMatch1.1.8

easy_software_productscupsMatch1.1.9

easy_software_productscupsMatch1.1.9_1

easy_software_productscupsMatch1.1.10

easy_software_productscupsMatch1.1.10_1

easy_software_productscupsMatch1.1.11

easy_software_productscupsMatch1.1.12

easy_software_productscupsMatch1.1.13

easy_software_productscupsMatch1.1.14

easy_software_productscupsMatch1.1.15

easy_software_productscupsMatch1.1.16

easy_software_productscupsMatch1.1.17

easy_software_productscupsMatch1.1.18

easy_software_productscupsMatch1.1.19

easy_software_productscupsMatch1.1.19_rc1

easy_software_productscupsMatch1.1.19_rc2

easy_software_productscupsMatch1.1.19_rc3

easy_software_productscupsMatch1.1.19_rc4

easy_software_productscupsMatch1.1.19_rc5

easy_software_productscupsMatch1.1.20

easy_software_productscupsMatch1.1.20_rc1

easy_software_productscupsMatch1.1.20_rc2

easy_software_productscupsMatch1.1.20_rc3

easy_software_productscupsMatch1.1.20_rc4

easy_software_productscupsMatch1.1.20_rc5

easy_software_productscupsMatch1.1.20_rc6

easy_software_productscupsMatch1.1.21

easy_software_productscupsMatch1.1.21_rc1

easy_software_productscupsMatch1.1.21_rc2

easy_software_productscupsMatch1.1.22

easy_software_productscupsMatch1.1.22_rc1

easy_software_productscupsMatch1.1.22_rc2

CPENameOperatorVersion
easy_software_products:cupseasy software products cupseq1.1
easy_software_products:cupseasy software products cupseq1.1.1
easy_software_products:cupseasy software products cupseq1.1.2
easy_software_products:cupseasy software products cupseq1.1.3
easy_software_products:cupseasy software products cupseq1.1.4
easy_software_products:cupseasy software products cupseq1.1.5
easy_software_products:cupseasy software products cupseq1.1.5_1
easy_software_products:cupseasy software products cupseq1.1.5_2
easy_software_products:cupseasy software products cupseq1.1.6
easy_software_products:cupseasy software products cupseq1.1.6_1

CPE	Name	Operator	Version
easy_software_products:cups	easy software products cups	eq	1.1
easy_software_products:cups	easy software products cups	eq	1.1.1
easy_software_products:cups	easy software products cups	eq	1.1.2
easy_software_products:cups	easy software products cups	eq	1.1.3
easy_software_products:cups	easy software products cups	eq	1.1.4
easy_software_products:cups	easy software products cups	eq	1.1.5
easy_software_products:cups	easy software products cups	eq	1.1.5_1
easy_software_products:cups	easy software products cups	eq	1.1.5_2
easy_software_products:cups	easy software products cups	eq	1.1.6
easy_software_products:cups	easy software products cups	eq	1.1.6_1