Signature Detail
Short Name |
APP:CUPS:APPLE-DOSELECT |
|---|---|
Severity |
High |
Recommended |
No |
Recommended Action |
Drop |
Category |
APP |
Keywords |
Apple CUPS cupsdDoSelect Remote Code Execution |
Release Date |
2010/10/13 |
Update Number |
1791 |
Supported Platforms |
idp-4.0+, isg-3.0+, j-series-9.5+, mx-9.4+, srx-9.2+, srx-branch-9.4+, vsrx-12.1+ |
APP: Apple CUPS cupsdDoSelect Remote Code Execution
This signature detects attempts to exploit a known code execution vulnerability in Apple CUPS. It is due to a use-after-free error within cupsdDoSelect function. Remote attackers can exploit this vulnerability by sending a malicious request to the target. A successful attack can allow arbitrary code execution.
Extended Description
CUPS is prone to a denial-of-service vulnerability. A remote attacker can exploit this issue to crash the affected application, denying service to legitimate users. This issue affects CUPS 1.3.7; other versions may be vulnerable as well.
Affected Products
- Apple Mac OS X 10.4.0
- Apple Mac OS X 10.4.1
- Apple Mac OS X 10.4.10
- Apple Mac OS X 10.4.11
- Apple Mac OS X 10.4.2
- Apple Mac OS X 10.4.3
- Apple Mac OS X 10.4.4
- Apple Mac OS X 10.4.5
- Apple Mac OS X 10.4.6
- Apple Mac OS X 10.4.7
- Apple Mac OS X 10.4.8
- Apple Mac OS X 10.4.9
- Apple Mac OS X 10.5
- Apple Mac OS X 10.5.1
- Apple Mac OS X 10.5.2
- Apple Mac OS X 10.5.3
- Apple Mac OS X 10.5.4
- Apple Mac OS X 10.5.5
- Apple Mac OS X 10.5.6
- Apple Mac OS X 10.5.7
- Apple Mac OS X 10.5.8
- Apple Mac OS X 10.6
- Apple Mac OS X 10.6.1
- Apple Mac OS X 10.6.2
- Apple Mac OS X Server 10.4.0
- Apple Mac OS X Server 10.4.1
- Apple Mac OS X Server 10.4.10
- Apple Mac OS X Server 10.4.11
- Apple Mac OS X Server 10.4.2
- Apple Mac OS X Server 10.4.3
- Apple Mac OS X Server 10.4.4
- Apple Mac OS X Server 10.4.5
- Apple Mac OS X Server 10.4.6
- Apple Mac OS X Server 10.4.7
- Apple Mac OS X Server 10.4.8
- Apple Mac OS X Server 10.4.9
- Apple Mac OS X Server 10.5
- Apple Mac OS X Server 10.5.1
- Apple Mac OS X Server 10.5.2
- Apple Mac OS X Server 10.5.3
- Apple Mac OS X Server 10.5.4
- Apple Mac OS X Server 10.5.5
- Apple Mac OS X Server 10.5.6
- Apple Mac OS X Server 10.5.7
- Apple Mac OS X Server 10.5.8
- Apple Mac OS X Server 10.6
- Apple Mac OS X Server 10.6.1
- Apple Mac OS X Server 10.6.2
- Avaya Aura Session Manager 1.1
- Avaya Aura Session Manager 5.2
- Avaya Aura System Platform SP1.1
- Debian Linux 5.0
- Debian Linux 5.0 Alpha
- Debian Linux 5.0 Amd64
- Debian Linux 5.0 Arm
- Debian Linux 5.0 Armel
- Debian Linux 5.0 Hppa
- Debian Linux 5.0 Ia-32
- Debian Linux 5.0 Ia-64
- Debian Linux 5.0 M68k
- Debian Linux 5.0 Mips
- Debian Linux 5.0 Mipsel
- Debian Linux 5.0 Powerpc
- Debian Linux 5.0 S/390
- Debian Linux 5.0 Sparc
- Easy Software Products CUPS 1.3.7
- Gentoo Linux
- Mandriva Enterprise Server 5
- Mandriva Enterprise Server 5 X86 64
- Mandriva Linux Mandrake 2008.0
- Mandriva Linux Mandrake 2008.0 X86 64
- Mandriva Linux Mandrake 2009.0
- Mandriva Linux Mandrake 2009.0 X86 64
- Mandriva Linux Mandrake 2009.1
- Mandriva Linux Mandrake 2009.1 X86 64
- Mandriva Linux Mandrake 2010.0
- Mandriva Linux Mandrake 2010.0 X86 64
- Pardus Linux 2009
- Red Hat Enterprise Linux 5 Server
- Red Hat Enterprise Linux Desktop 5 Client
- Red Hat Enterprise Linux Desktop Workstation 5 Client
- Red Hat Fedora 10
- Red Hat Fedora 11
- Red Hat Fedora 12
- Red Hat Fedora 13
- Sun OpenSolaris Build Snv 100
- Sun OpenSolaris Build Snv 101
- Sun OpenSolaris Build Snv 101A
- Sun OpenSolaris Build Snv 102
- Sun OpenSolaris Build Snv 103
- Sun OpenSolaris Build Snv 104
- Sun OpenSolaris Build Snv 105
- Sun OpenSolaris Build Snv 106
- Sun OpenSolaris Build Snv 107
- Sun OpenSolaris Build Snv 108
- Sun OpenSolaris Build Snv 109
- Sun OpenSolaris Build Snv 110
- Sun OpenSolaris Build Snv 111
- Sun OpenSolaris Build Snv 111A
- Sun OpenSolaris Build Snv 112
- Sun OpenSolaris Build Snv 113
- Sun OpenSolaris Build Snv 114
- Sun OpenSolaris Build Snv 115
- Sun OpenSolaris Build Snv 116
- Sun OpenSolaris Build Snv 117
- Sun OpenSolaris Build Snv 118
- Sun OpenSolaris Build Snv 119
- Sun OpenSolaris Build Snv 120
- Sun OpenSolaris Build Snv 121
- Sun OpenSolaris Build Snv 122
- Sun OpenSolaris Build Snv 123
- Sun OpenSolaris Build Snv 124
- Sun OpenSolaris Build Snv 125
- Sun OpenSolaris Build Snv 126
- Sun OpenSolaris Build Snv 127
- Sun OpenSolaris Build Snv 128
- Sun OpenSolaris Build Snv 129
- Sun OpenSolaris Build Snv 130
- Sun OpenSolaris Build Snv 87
- Sun OpenSolaris Build Snv 88
- Sun OpenSolaris Build Snv 89
- Sun OpenSolaris Build Snv 90
- Sun OpenSolaris Build Snv 91
- Sun OpenSolaris Build Snv 92
- Sun OpenSolaris Build Snv 93
- Sun OpenSolaris Build Snv 94
- Sun OpenSolaris Build Snv 95
- Sun OpenSolaris Build Snv 96
- Sun OpenSolaris Build Snv 98
- Sun OpenSolaris Build Snv 99
- SuSE Linux Enterprise Server for S/390 9.0.0
- SuSE Moblin 2.0
- SuSE Moblin 2.1
- SuSE Novell Linux Desktop 1.0.0
- SuSE Novell Linux Desktop 9.0.0
- SuSE Open-Enterprise-Server 1
- SuSE Open-Enterprise-Server 9.0.0
- SuSE Open-Enterprise-Server
- SuSE openSUSE 11.0
- SuSE openSUSE 11.1
- SuSE openSUSE 11.2
- SuSE SUSE Linux Enterprise 11
- SuSE SUSE Linux Enterprise Desktop 10 SP2
- SuSE SUSE Linux Enterprise Desktop 10 SP3
- SuSE SUSE Linux Enterprise Server 10 SP2
- SuSE SUSE Linux Enterprise Server 10 SP3
- SuSE SUSE Linux Enterprise Server 9
References
- BugTraq: 37048
- CVE: CVE-2009-3553