Ubuntu 2172-1: Important Advisory Regarding CUPS XSS Vulnerability Risks

ubuntu

April 24, 2014

CUPS could be made to expose sensitive information over the network.

Summary

CUPS could be made to expose sensitive information over the network.

Software Description:

- cups: Common UNIX Printing System(tm)

Details:

Alex Korobkin discovered that the CUPS web interface incorrectly protected

against cross-site scripting (XSS) attacks. If an authenticated user were

tricked into visiting a malicious website while logged into CUPS, a remote

attacker could modify the CUPS configuration and possibly steal

confidential data.

Topics Covered

security advisory information leak critical software update cups xss ubuntu

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 13.10:
  cups                            1.7.0~rc1-0ubuntu5.3

Ubuntu 12.10:
  cups                            1.6.1-0ubuntu11.6

Ubuntu 12.04 LTS:
  cups                            1.5.3-0ubuntu8.2

Ubuntu 10.04 LTS:
  cups                            1.4.3-1ubuntu1.11

In general, a standard system update will make all the necessary changes.