SuSE: 'cups' vulnerabilities

    Date05 Mar 2001
    CategorySuSE
    2108
    Posted ByLinuxSecurity Advisories
    A SuSE-internal security audit of the cups package conducted by Sebastian Krahmer and Thomas Biege revealed several overflows as well as insecure file handling.
    
    ______________________________________________________________________________
    
                            SuSE Security Announcement
    
            Package:                cups
            Announcement-ID:        SuSE-SA:2001:05
            Date:                   Monday, March  5th, 2001 13:10:13 MET
            Affected SuSE versions: 7.1
            Vulnerability Type:     local/remote root compromise
            Severity (1-10):        5
            SuSE default package:   no
            Other affected systems: All UN*X-systems using cups < 1.1.6.
    
        Content of this advisory:
            1) security vulnerability resolved: cups
               problem description, discussion, solution and upgrade information
            2) pending vulnerabilities, solutions, workarounds
            3) standard appendix (further information)
    
    ______________________________________________________________________________
    
    1)  problem description, brief discussion, solution, upgrade information
    
    
        CUPS is an implementation of the Internet Printing Protocol (IPP) and
        is used as an alternative to the lpr and LPRng packages.
        The CUPS package aims to be a comprehensive printing solution for
        UN*X-systems. In SuSE-7.1 distribution, the cups package is not used by
        any configuration utilities unless the admin has decided to configure
        the package manually.
        The cups package has been introduced in the SuSE-7.1 distribution;
        enhanced support for future releases of the SuSE Linux distribution is
        planned.
        A SuSE-internal security audit conducted by Sebastian Krahmer and Thomas
        Biege revealed several overflows as well as insecure file handling.
        These bugs have been fixed by adding length-checks and securing the
        file-access.
        For a temporary workaround, remove the suid-bit from the 'lppasswd'
        program.
        Make sure nobody from outside your network can access the CUPS-server
        running on port 631. Allowing access to this port from outside is a
        bad idea regardless whether or not the used version is vulnerable.
    
        No remote-exploits are known yet.
    
        Download the update package from locations desribed below and install
        the package with the command `rpm -Uhv file.rpm'. The md5sum for each
        file is in the line below. You can verify the integrity of the rpm
        files using the command
            `rpm --checksig --nogpg file.rpm',
        independently from the md5 signatures below.
    
    
        i386 Intel Platform:
    
        SuSE-7.1
         ftp://ftp.suse.com/pub/suse/i386/update/7.1/d3/cups-devel-1.1.6-13.i386.rpm
          23c6484952ab0c1de81e2db38bcd3afc
        SuSE-7.1
         ftp://ftp.suse.com/pub/suse/i386/update/7.1/n2/cups-1.1.6-13.i386.rpm
          812e0c47dcfe508eb9e8ccb38165b6d7
        source rpm:
         ftp://ftp.suse.com/pub/suse/i386/update/7.1/zq1/cups-1.1.6-13.src.rpm
          204cea2ad6a61293c191e70a2cacdc82
    
    
    
    ______________________________________________________________________________
    
    2)  Pending vulnerabilities in SuSE Distributions and Workarounds:
    
    
        Effective Monday, March 19 2001, five weeks after the release of the new
        SuSE-7.1 distribution, SuSE will discontinue support for the SuSE-linux
        distributions SuSE-6.0 SuSE-6.1 and SuSE-6.2.
    
        SuSE puts much effort into adding security improvements (patches) to the
        software instead of publishing a new version; the same program with a fix
        for a specific problem promises to work just as reliable as the original
        version from the distribution, whereas new versions introduce new
        functionality which changes the behaviour.
        In some cases however, especially if the security leak is based on
        problematic design decisions or when the fix(es) are fairly large, the
        only reasonable fix for a security problem is to update to a newer version
        of the software. These newer versions tend to become incompatible with our
        older distribution releases because of missing features in the operating
        system environment. This forces us to focus on the distributions of a
        newer release date.
    
        The remaining distributions
         SuSE-6.3,
         SuSE-6.4,
         SuSE-7.0 and
         SuSE-7.1
    
        for the Intel i386, AXP Alpha, SPARC as well as PPC Power PC platforms
        will continue to be supported for a two-year period after the release of
        the respective distribution.
    
    
    ______________________________________________________________________________
    
    3)  standard appendix:
    
        SuSE runs two security mailing lists to which any interested party may
        subscribe:
    
        This email address is being protected from spambots. You need JavaScript enabled to view it.
            -   general/linux/SuSE security discussion.
                All SuSE security announcements are sent to this list.
                To subscribe, send an email to
                    <This email address is being protected from spambots. You need JavaScript enabled to view it.>.
    
        This email address is being protected from spambots. You need JavaScript enabled to view it.
            -   SuSE's announce-only mailing list.
                Only SuSE's security annoucements are sent to this list.
                To subscribe, send an email to
                    <This email address is being protected from spambots. You need JavaScript enabled to view it.>.
    
        For general information or the frequently asked questions (faq)
        send mail to:
            <This email address is being protected from spambots. You need JavaScript enabled to view it.> or
            <This email address is being protected from spambots. You need JavaScript enabled to view it.> respectively.
    
        ===============================================
        SuSE's security contact is <This email address is being protected from spambots. You need JavaScript enabled to view it.>.
        ===============================================
    
    Regards,
    Sebastian Krahmer
    
    ______________________________________________________________________________
    
        The information in this advisory may be distributed or reproduced,
        provided that the advisory is not modified in any way.
        SuSE GmbH makes no warranties of any kind whatsoever with respect
        to the information contained in this security advisory.
    
    Type Bits/KeyID    Date       User ID
    pub  2048/3D25D3D9 1999/03/06 SuSE Security Team <This email address is being protected from spambots. You need JavaScript enabled to view it.>
    
    -----BEGIN PGP PUBLIC KEY BLOCK-----
    Version: 2.6.3i
    
    mQENAzbhLQQAAAEIAKAkXHe0lWRBXLpn38hMHy03F0I4Sszmoc8aaKJrhfhyMlOA
    BqvklPLE2f9UrI4Xc860gH79ZREwAgPt0pi6+SleNFLNcNFAuuHMLQOOsaMFatbz
    JR9i4m/lf6q929YROu5zB48rBAlcfTm+IBbijaEdnqpwGib45wE/Cfy6FAttBHQh
    1Kp+r/jPbf1mYAvljUfHKuvbg8t2EIQz/5yGp+n5trn9pElfQO2cRBq8LFpf1l+U
    P7EKjFmlOq+Gs/fF98/dP3DfniSd78LQPq5vp8RL8nr/o2i7jkAQ33m4f1wOBWd+
    cZovrKXYlXiR+Bf7m2hpZo+/sAzhd7LmAD0l09kABRG0JVN1U0UgU2VjdXJpdHkg
    VGVhbSA8c2VjdXJpdHlAc3VzZS5kZT6JARUDBRA24S1H5Fiyh7HKPEUBAVcOB/9b
    yHYji1/+4Xc2GhvXK0FSJN0MGgeXgW47yxDL7gmR4mNgjlIOUHZj0PEpVjWepOJ7
    tQS3L9oP6cpj1Fj/XxuLbkp5VCQ61hpt54coQAvYrnT9rtWEGN+xmwejT1WmYmDJ
    xG+EGBXKr+XP69oIUl1E2JO3rXeklulgjqRKos4cdXKgyjWZ7CP9V9daRXDtje63
    Om8gwSdU/nCvhdRIWp/Vwbf7Ia8iZr9OJ5YuQl0DBG4qmGDDrvImgPAFkYFzwlqo
    choXFQ9y0YVCV41DnR+GYhwl2qBd81T8aXhihEGPIgaw3g8gd8B5o6mPVgl+nJqI
    BkEYGBusiag2pS6qwznZiQEVAwUQNuEtBHey5gA9JdPZAQFtOAf+KVh939b0J94u
    v/kpg4xs1LthlhquhbHcKNoVTNspugiC3qMPyvSX4XcBr2PC0cVkS4Z9PY9iCfT+
    x9WM96g39dAF+le2CCx7XISk9XXJ4ApEy5g4AuK7NYgAJd39PPbERgWnxjxir9g0
    Ix30dS30bW39D+3NPU5Ho9TD/B7UDFvYT5AWHl3MGwo3a1RhTs6sfgL7yQ3U+mvq
    MkTExZb5mfN1FeaYKMopoI4VpzNVeGxQWIz67VjJHVyUlF20ekOz4kWVgsxkc8G2
    saqZd6yv2EwqYTi8BDAduweP33KrQc4KDDommQNDOXxaKOeCoESIdM4p7Esdjq1o
    L0oixF12Cg==
    =pIeS
    -----END PGP PUBLIC KEY BLOCK-----
    
    
    
    You are not authorised to post comments.

    Comments powered by CComment

    LinuxSecurity Poll

    What do you think of the articles on LinuxSecurity?

    No answer selected. Please try again.
    Please select either existing option or enter your own, however not both.
    Please select minimum 0 answer(s) and maximum 3 answer(s).
    /main-polls/24-what-do-you-think-of-the-quality-of-the-articles-on-linuxsecurity?task=poll.vote&format=json
    24
    radio
    [{"id":"87","title":"Excellent, don't change a thing!","votes":"64","type":"x","order":"1","pct":57.14,"resources":[]},{"id":"88","title":"Should be more technical","votes":"15","type":"x","order":"2","pct":13.39,"resources":[]},{"id":"89","title":"Should include more HOWTOs","votes":"33","type":"x","order":"3","pct":29.46,"resources":[]}]["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"]["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"]350
    bottom200

    We use cookies to provide and improve our services. By using our site, you consent to our Cookie Policy.