Secunia Logo
Netsikker nu! 2008
 
Mandriva update for cups
Secunia Advisory: SA24895
Release Date: 2007-04-17
Last Update: 2008-02-07
Popularity: 4,130 views

Critical:
Moderately critical
Impact: DoS
System access
Where: From local network
Solution Status: Vendor Patch

OS:Mandriva Linux 2007.0

Subscribe: Instant alerts on relevant vulnerabilities

CVE reference:CVE-2007-0720
CVE-2007-4045
CVE-2007-5849


Description:
Mandriva has issued an update for cups. This fixes some vulnerabilities, which can be exploited by malicious people to cause a DoS (Denial of Service) or potentially compromise a vulnerable system.

For more information:
SA24517
SA28129

Solution:
Apply updated packages.

Mandriva Linux 2007

e7b60799c6564dab2fac51c4f141dbe5 2007.0/i586/cups-1.2.4-1.6mdv2007.0.i586.rpm
4c32071aad3f9098ea2dd2f9a1b7cd49 2007.0/i586/cups-common-1.2.4-1.6mdv2007.0.i586.rpm
63d9a864863267cf2f4fddc02e095e06 2007.0/i586/cups-serial-1.2.4-1.6mdv2007.0.i586.rpm
1f4920904c759ce0e9abb3bbc8cdd594 2007.0/i586/libcups2-1.2.4-1.6mdv2007.0.i586.rpm
b1ec7aa06c2be308ff9c2a63da1c7731 2007.0/i586/libcups2-devel-1.2.4-1.6mdv2007.0.i586.rpm
f383e8d9d10ca981e447dd6a01ee851d 2007.0/i586/php-cups-1.2.4-1.6mdv2007.0.i586.rpm
f79a5dfe12eb0645f787ad1112c21df6 2007.0/SRPMS/cups-1.2.4-1.6mdv2007.0.src.rpm

Mandriva Linux 2007/X86_64

b7553d0c3fbc26b3701b141c9b83d4f3 2007.0/x86_64/cups-1.2.4-1.6mdv2007.0.x86_64.rpm
4a38d3105789f691876915a408b14238 2007.0/x86_64/cups-common-1.2.4-1.6mdv2007.0.x86_64.rpm
66f5f00ec62eda88ad3bcc4a7c1bb9f8 2007.0/x86_64/cups-serial-1.2.4-1.6mdv2007.0.x86_64.rpm
8cb823e9208e3318df6856d6f604e915 2007.0/x86_64/lib64cups2-1.2.4-1.6mdv2007.0.x86_64.rpm
87a2ecc7dea1d4df9dc375aaa08706df 2007.0/x86_64/lib64cups2-devel-1.2.4-1.6mdv2007.0.x86_64.rpm
80f26c35b1a9df435722fda1cbbf73a3 2007.0/x86_64/php-cups-1.2.4-1.6mdv2007.0.x86_64.rpm
f79a5dfe12eb0645f787ad1112c21df6 2007.0/SRPMS/cups-1.2.4-1.6mdv2007.0.src.rpm

Changelog:
2008-02-07: Updated advisory with new packages as the fix for CVE-2007-0720 introduced a new DoS vulnerability (CVE-2007-4045). New packages also include a fix for CVE-2007-5849. Added reference to SA28129 and link to the new vendor advisory.

Original Advisory:
http://www.mandriva.com/security/advisories?name=MDKSA-2007:086
http://www.mandriva.com/en/security/advisories?name=MDVSA-2008:036

Other References:
SA24517:
http://secunia.com/advisories/24517/

SA28129:
http://secunia.com/advisories/28129/


Track this Secunia Advisory
Customers of the Secunia Vulnerability Intelligence solutions will automatically receive updates when new information regarding this advisory is released.

Read more about our Vulnerability Intelligence solutions and what they can do for you and your company.

About this Secunia Advisory
Please note: The information that this Secunia Advisory is based on comes from a third party unless stated otherwise.

Secunia collects, validates, and verifies all vulnerability reports issued by security research groups, vendors, and others.
  
Latest Advisories

Send Feedback to Secunia
If you have new information regarding this Secunia advisory or a product in our database, please send it to us using either our web form or email us at vuln@secunia.com.

Ideas, suggestions, and other feedback are most welcome.

Most Popular - 3 Hours

1. phpBB Avatar Script Insertion Vulnerability // 42 views
2. phpBB Avatar Functions Information Disclosure and Deletion // 37 views
3. CUPS Multiple Vulnerabilities // 34 views
4. CA ARCserve Backup Multiple Vulnerabilities // 33 views
5. Sun Java System Web Proxy Server FTP Subsystem Buffer Overflow // 32 views
6. ScriptsEz Easy Image Downloader "id" File Disclosure Vulnerability // 31 views
7. Apple Mac OS X Security Update Fixes Multiple Vulnerabilities // 30 views
8. phpBB Cross Site Scripting and Unspecified Vulnerabilities // 26 views
9. phpBB BBcode "url" Script Insertion Vulnerability // 26 views
10. phpBB reveals user IPs // 26 views