CVE Reference: CVE-2010-2432

NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE.

Original Page at CVE MITRE:
CVE-2010-2432

Description:
The cupsDoAuthentication function in auth.c in the client in CUPS before 1.4.4, when HAVE_GSSAPI is omitted, does not properly handle a demand for authorization, which allows remote CUPS servers to cause a denial of service (infinite loop) via HTTP_UNAUTHORIZED responses.

CVE Status:
Candidate

References:

SAID
  Secunia Advisory: SA43521

MANDRIVA
  http://www.mandriva.com/security/advisories?name=MDVSA-2011:146

GENTOO
  http://security.gentoo.org/glsa/glsa-201207-10.xml

DEBIAN
  http://www.debian.org/security/2011/dsa-2176

CONFIRM
  http://cups.org/str.php?L3518
  http://cups.org/articles.php?L596


Return to the previous page.