REDHAT-BUG-1084577: Low severity cups vulnerability
It was reported that ANSI escape sequences could be added to printer names in CUPS. Becaue CUPS has a browsing feature that, when enabled, allows remote hosts to announce shared printers, a malicious host or user could send a specially-crafted UDP packet to a CUPS server announcing an arbitrary printer name that includes ANSI escape sequences. Since the CUPS daemon does not remove these characters, a user on the targeted system could query the printer list (using 'lpstat -a', for example). If this were done in a terminal that supported the ANSI escape sequences (like a terminal with support for color), then code execution could be possible as the terminal would interpret the ANSI escape sequences contained in the printer name.
Affected Software
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-1084577?
The severity of REDHAT-BUG-1084577 is considered to be critical, as it allows for remote execution of arbitrary commands through crafted printer names.
How do I fix REDHAT-BUG-1084577?
To fix REDHAT-BUG-1084577, update your CUPS installation to the latest version that has addressed this vulnerability.
What systems are affected by REDHAT-BUG-1084577?
REDHAT-BUG-1084577 affects the Apple CUPS software running on various platforms that utilize it for printing services.
What is the potential impact of exploiting REDHAT-BUG-1084577?
Exploiting REDHAT-BUG-1084577 could allow an attacker to execute arbitrary commands on the CUPS server, leading to unauthorized access and system compromise.
When was REDHAT-BUG-1084577 reported?
REDHAT-BUG-1084577 was reported in early June 2014.