Signature Detail
Short Name |
UDP:ZERO-DATA |
|---|---|
Severity |
Medium |
Recommended |
Yes |
Recommended Action |
Drop |
Category |
UDP |
Release Date |
2006/04/04 |
Update Number |
1213 |
Supported Platforms |
idp-4.0+, isg-3.4+, j-series-9.5+, mx-9.4+, srx-9.2+, srx-branch-9.4+, vsrx-12.1+ |
UDP: Zero Data
This protocol anomaly triggers if it detects UDP packets without data. Some vulnerability scanners also send empty UDP packets to probe for open services. This may indicate a scanning or exploit attempt.
Extended Description
CUPS is prone to a remotely exploitable denial of service vulnerability that may be triggered through port 631 by a zero-length UDP packet.
Affected Products
- Apple Mac OS X 10.2.0
- Apple Mac OS X 10.2.1
- Apple Mac OS X 10.2.2
- Apple Mac OS X 10.2.3
- Apple Mac OS X 10.2.4
- Apple Mac OS X 10.2.5
- Apple Mac OS X 10.2.6
- Apple Mac OS X 10.2.7
- Apple Mac OS X 10.2.8
- Apple Mac OS X 10.3.0
- Apple Mac OS X 10.3.1
- Apple Mac OS X 10.3.2
- Apple Mac OS X 10.3.3
- Apple Mac OS X 10.3.4
- Apple Mac OS X 10.3.5
- Apple Mac OS X Server 10.2.0
- Apple Mac OS X Server 10.2.1
- Apple Mac OS X Server 10.2.2
- Apple Mac OS X Server 10.2.3
- Apple Mac OS X Server 10.2.4
- Apple Mac OS X Server 10.2.5
- Apple Mac OS X Server 10.2.6
- Apple Mac OS X Server 10.2.7
- Apple Mac OS X Server 10.2.8
- Apple Mac OS X Server 10.3.0
- Apple Mac OS X Server 10.3.1
- Apple Mac OS X Server 10.3.2
- Apple Mac OS X Server 10.3.3
- Apple Mac OS X Server 10.3.4
- Apple Mac OS X Server 10.3.5
- Easy Software Products CUPS 1.1.14
- Easy Software Products CUPS 1.1.15
- Easy Software Products CUPS 1.1.16
- Easy Software Products CUPS 1.1.17
- Easy Software Products CUPS 1.1.18
- Easy Software Products CUPS 1.1.19
- Easy Software Products CUPS 1.1.19 Rc5
- Easy Software Products CUPS 1.1.20
- Gentoo Linux 0.5.0
- Gentoo Linux 0.7.0
- Gentoo Linux 1.1.0 A
- Gentoo Linux 1.2.0
- Gentoo Linux 1.4.0
- Gentoo Linux 1.4.0 _rc1
- Gentoo Linux 1.4.0 _rc2
- Gentoo Linux 1.4.0 _rc3
- Red Hat Linux 7.3.0
- Red Hat Linux 7.3.0 I386
- Red Hat Linux 9.0.0 I386
- SCO Open Server 5.0.7
- SCO Open Server 6.0.0
- SCO Unixware 7.1.3 up
- SCO Unixware 7.1.4
- Slackware Linux 10.0.0
- Slackware Linux 9.0.0
- Slackware Linux 9.1.0
- Slackware Linux -Current
- Sun Java Desktop System (JDS) 2.0.0
- Sun Java Desktop System (JDS) 2003
- Trustix Secure Enterprise Linux 2.0.0
- Trustix Secure Linux 2.0.0
- Trustix Secure Linux 2.1.0
References
- BugTraq: 11183
- CVE: CVE-2004-0558
- URL: http://rhn.redhat.com/errata/RHSA-2004-449.html