CVE-2005-2874: Medium severity Easy Software Products Cups vulnerability
Published Sep 13, 2005
·Updated
The ispathabsolute function in scheduler/client.c for the daemon in CUPS before 1.1.23 allows remote attackers to cause a denial of service (CPU consumption by tight loop) via a "..\.." URL in an HTTP request.
Affected Software
45 affected components
Easy Software Products Cups=1.1
Easy Software Products Cups=1.1.1
Easy Software Products Cups=1.1.2
Easy Software Products Cups=1.1.3
Easy Software Products Cups=1.1.4
Easy Software Products Cups=1.1.5
Easy Software Products Cups=1.1.5_1
Easy Software Products Cups=1.1.5_2
Easy Software Products Cups=1.1.6
Easy Software Products Cups=1.1.6_1
Easy Software Products Cups=1.1.6_2
Easy Software Products Cups=1.1.6_3
Easy Software Products Cups=1.1.7
Easy Software Products Cups=1.1.8
Easy Software Products Cups=1.1.9
Easy Software Products Cups=1.1.9_1
Easy Software Products Cups=1.1.10
Easy Software Products Cups=1.1.10_1
Easy Software Products Cups=1.1.11
Easy Software Products Cups=1.1.12
Easy Software Products Cups=1.1.13
Easy Software Products Cups=1.1.14
Easy Software Products Cups=1.1.15
Easy Software Products Cups=1.1.16
Easy Software Products Cups=1.1.17
Easy Software Products Cups=1.1.18
Easy Software Products Cups=1.1.19
Easy Software Products Cups=1.1.19_rc1
Easy Software Products Cups=1.1.19_rc2
Easy Software Products Cups=1.1.19_rc3
Easy Software Products Cups=1.1.19_rc4
Easy Software Products Cups=1.1.19_rc5
Easy Software Products Cups=1.1.20
Easy Software Products Cups=1.1.20_rc1
Easy Software Products Cups=1.1.20_rc2
Easy Software Products Cups=1.1.20_rc3
Easy Software Products Cups=1.1.20_rc4
Easy Software Products Cups=1.1.20_rc5
Easy Software Products Cups=1.1.20_rc6
Easy Software Products Cups=1.1.21
Easy Software Products Cups=1.1.21_rc1
Easy Software Products Cups=1.1.21_rc2
Easy Software Products Cups=1.1.22
Easy Software Products Cups=1.1.22_rc1
Easy Software Products Cups=1.1.22_rc2
Remediation
Patch Available
Patch Available
Event History
Sep 13, 2005
CVE Published
via MITRE·08:00 AM
Data Sourced
via MITRE·08:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2005-2874?
CVE-2005-2874 is classified as a denial of service vulnerability that can lead to high CPU consumption.
2
How do I fix CVE-2005-2874?
To remediate CVE-2005-2874, upgrade to CUPS version 1.1.23 or later which addresses this vulnerability.
3
What software is affected by CVE-2005-2874?
CVE-2005-2874 affects all CUPS versions prior to 1.1.23.
4
Can CVE-2005-2874 be exploited remotely?
Yes, CVE-2005-2874 can be exploited by remote attackers using specifically crafted HTTP requests.
5
What types of attacks are associated with CVE-2005-2874?
CVE-2005-2874 is primarily associated with denial of service attacks that result from excessive CPU usage.