Vulnerability in Apple Cups
CVE-2002-1372
Common Unix Printing System (CUPS) 1.1.14 through 1.1.17 does not properly check the return values of various file and socket operations, which could allow a remote attacker to cause a denial of service (resource exhaustion) by causing file descriptors to be assigned and not released, as demonstrated by fanta.
Published · last modified .
CVSS v3 metric
CVSS v3 base score 7.5 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H.
EPSS exploit prediction
EPSS: 0.030 (86.7th percentile), scored .
Low probability of exploitation in the next 30 days, but still tracked. 87th percentile — 86.7% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.030 · newest: 0.030 · change: 0.000
Affected products
- Apple Cups
- Apple Mac OS X — versions 10.2, 10.2.2
- Debian Linux — versions 2.2, 3.0
Weakness classification (CWE)
References
- archives.neohapsis.com/archives/vulnwatch/2002-q4/0117.html (mailing-list, Broken Link)
- distro.conectiva.com.br/atualizacoes/ (vendor-advisory, Broken Link)
- www.debian.org/security/2003/dsa-232 (vendor-advisory, Third Party Advisory)
- www.novell.com/linux/security/advisories/2003_002_cups.html (vendor-advisory, Broken Link)
- www.idefense.com/advisory/12.19.02.txt (Exploit, Broken Link, Vendor Advisory)
- www.redhat.com/support/errata/RHSA-2002-295.html (vendor-advisory, Broken Link)
- marc.info/ (mailing-list, Mailing List)
- www.mandrakesoft.com/security/advisories (vendor-advisory, Broken Link)
- www.securityfocus.com/bid/6440 (VDB Entry, Third Party Advisory, vdb-entry, Broken Link)
- exchange.xforce.ibmcloud.com/vulnerabilities/10912 (VDB Entry, Third Party Advisory, vdb-entry)
Frequently asked questions
- What is CVE-2002-1372?
- CVE-2002-1372 is a high-severity vulnerability in Apple Cups, classified under CWE-252. CVSS score: 7.5/10. Published 2002-12-26.
- How severe is CVE-2002-1372?
- High severity. CVSS v3 base score is 7.5 out of 10.