CVE-2009-0164: Input Validation
Aaron Sigel of Apple Product Security reported that CUPS did not check Host: HTTP header in the connections to the daemon. This insufficient checking may be of an advantage as part of some other attack, e.g. DNS rebinding attack (however, for such attack, user's web browser or browser plugin must be prone to the DNS rebinding attack).
Upstream patch adds check for the Host: header used in clients' requests. It also introduced ServerAlias configuration directive, that must be used to allow clients to use additional valid host names besides those set has hostname or hostname's aliases.
Other sources
The web interface for CUPS before 1.3.10 does not validate the HTTP Host header in a client request, which makes it easier for remote attackers to conduct DNS rebinding attacks.
Affected Software
Remediation
Patch Available
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2009-0164?
CVE-2009-0164 has a medium severity rating due to its potential to facilitate DNS rebinding attacks.
How do I fix CVE-2009-0164?
To fix CVE-2009-0164, ensure that you update to the latest version of CUPS that resolves this vulnerability.
Which versions of CUPS are affected by CVE-2009-0164?
CVE-2009-0164 affects multiple versions of CUPS, including 1.1.20, 1.1.5-2, 1.1.14, and several others.
What types of attacks can CVE-2009-0164 enable?
CVE-2009-0164 can potentially enable DNS rebinding attacks by allowing unauthorized access to the CUPS daemon.
Is there a workaround for CVE-2009-0164 if I cannot update immediately?
A potential workaround for CVE-2009-0164 involves restricting access to the CUPS daemon and configuring firewall rules.