REDHAT-BUG-490597
First published: Tue Mar 17 2009(Updated: )
Aaron Sigel of Apple Product Security reported that CUPS did not check Host: HTTP header in the connections to the daemon. This insufficient checking may be of an advantage as part of some other attack, e.g. DNS rebinding attack (however, for such attack, user's web browser or browser plugin must be prone to the DNS rebinding attack). Upstream patch adds check for the Host: header used in clients' requests. It also introduced ServerAlias configuration directive, that must be used to allow clients to use additional valid host names besides those set has hostname or hostname's aliases.
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Apple CUPS |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://bugzilla.redhat.com/show_bug.cgi/attachment.cgi?id=335489&action=diff
- https://bugzilla.redhat.com/show_bug.cgi/attachment.cgi?id=335489&action=edit
- https://bugzilla.redhat.com/show_bug.cgi/attachment.cgi?id=337477&action=diff
- https://bugzilla.redhat.com/show_bug.cgi/attachment.cgi?id=337477&action=edit
- https://bugzilla.redhat.com/show_bug.cgi/attachment.cgi?id=337478&action=diff
- https://bugzilla.redhat.com/show_bug.cgi/attachment.cgi?id=337478&action=edit
- https://bugzilla.redhat.com/show_bug.cgi/attachment.cgi?id=337735&action=diff
- https://bugzilla.redhat.com/show_bug.cgi/attachment.cgi?id=337735&action=edit
- http://www.cups.org/articles.php?L582
- http://admin.fedoraproject.org/updates/cups-1.3.10-1.fc9
- http://admin.fedoraproject.org/updates/cups-1.3.10-1.fc10
- https://bugzilla.redhat.com/show_bug.cgi/attachment.cgi?id=532352&action=diff
- https://bugzilla.redhat.com/show_bug.cgi/attachment.cgi?id=532352&action=edit
- https://bugzilla.redhat.com/show_bug.cgi/attachment.cgi?id=532590&action=diff
- https://bugzilla.redhat.com/show_bug.cgi/attachment.cgi?id=532590&action=edit
- https://bugzilla.redhat.com/show_bug.cgi?id=490597
- collector/redhat-bugzilla
- alias/CVE-2009-0164
- agent/references
- agent/type
- agent/first-publish-date
- agent/last-modified-date
- agent/severity
- agent/description
- agent/event
- agent/softwarecombine
- agent/tags
- agent/guess-ai
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- vendor/apple
- canonical/apple cups