The remote host is missing the patch for the advisory SUSE-SA:2004:031 (cups).


The Common Unix Printing System (CUPS) enables local and remote users to obtain printing functionallity via the Internet Printing Protocol (IPP).
Alvaro Martinez Echevarria has found a remote Denial of Service condition within CUPS which allows remote users to make the cups server unresponsive.
Additionally the SUSE Security Team has discovered a flaw in the foomatic-rip print filter which is commonly installed along with cups.
It allows remote attackers, which are listed in the printing ACLs, to execute arbitrary commands as the printing user 'lp'.

The remote host is affected by the vulnerability described in GLSA-200409-24 (Foomatic: Arbitrary command execution in foomatic-rip filter)

    There is a vulnerability in the foomatic-filters package. This     vulnerability is due to insufficient checking of command-line parameters     and environment variables in the foomatic-rip filter.
  Impact :

    This vulnerability may allow both local and remote attackers to execute     arbitrary commands on the print server with the permissions of the spooler     (oftentimes the 'lp' user).
  Workaround :

    There is no known workaround at this time.

hplip のこの更新は以下を修正します。

- このパッチは、元は CUPS の foomatic-rip に影響を与えましたが、foomatic-rip-hplip でも見つかりました。
 （CVE-2004-0801：CVSS v2 ベーススコア：7.5（AV:N/AC:L/Au:N/C:P/I:P/A:P））

- hplip パッケージの foomatic 印刷フィルターに、リモートコード実行の脆弱性が含まれていました。リモートユーザーが、CUPS などの印刷サーバーへのアクセスを許可されている場合、 lp システムユーザーとして任意のコマンドを実行する可能性があります。
 （CVE-2011-2697：CVSS v2 ベーススコア：6.8（AV:N/AC:L/Au:N/C:P/I:P/A:P））

This update of hplip fixes :

  - This patch originally affected foomatic-rip in CUPS but     was found to be in foomatic-rip-hplip too.
    (CVE-2004-0801: CVSS v2 Base Score: 7.5     (AV:N/AC:L/Au:N/C:P/I:P/A:P))

  - The foomatic print filters of the hplip package     contained a remote code execution vulnerability. Remote     users, if allowed to access a print server such as CUPS,     could execute arbitrary commands as lp system user.
    (CVE-2011-2697: CVSS v2 Base Score: 6.8     (AV:N/AC:M/Au:N/C:P/I:P/A:P))

A Bug in cupsomatic/foomatic-filters that allowed remote printer users to execute arbitrary commands as the uid of the printer daemon has been fixed (CAN-2004-0801). While the same problem was fixed in earlier products, the fix got lost during package upgrade of foomatic-filters.

此 hplip 更新可修正：

- 此修補程式最初影響 CUPS 中的 foomatic-rip，但據發現也會影響 foomatic-rip-hplip。
 (CVE-2004-0801：CVSS v2 基本分數：7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P))

- hplip 套件的 foomatic 列印篩選器包含一個遠端程式碼執行弱點。如果遠端使用者能夠存取列印伺服器，例如 CUPS，便可以 lp 系統使用者的身分執行任意命令。
 (CVE-2011-2697：CVSS v2 基本分數：6.8 (AV:N/AC:M/Au:N/C:P/I:P/A:P))

此 hplip 更新修复了：

- 此修补程序最初影响的是 CUPS 中的 foomatic-rip，但发现它也存在于 foomatic-rip-hplip 中。
 （CVE-2004-0801: CVSS v2 基本分数：7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)）

- hplip 程序包的 foomatic 打印过滤器包含远程代码执行漏洞。如果允许远程用户访问 CUPS 等打印服务器，则其可以 lp 系统用户的身份执行任意命令。
 （CVE-2011-2697：CVSS v2 基本分数：6.8 (AV:N/AC:M/Au:N/C:P/I:P/A:P)）

hplip のこの更新は以下を修正します。

- CVE-2004-0801：CVSS v2 ベーススコア：7.5（AV:N/AC:L/Au:N/C:P/I:P/A:P）：このパッチはもともと、CUPS 内の foomatic-rip に影響を与えていましたが、foomatic-rip-hplip にも影響が見つかりました。

此 hplip 更新可修正：

- CVE-2004-0801：CVSS v2 基本分數：7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)：此修補程式最初影響 CUPS 中的 foomatic-rip，但據發現也會影響 foomatic-rip-hplip。

此 hplip 更新修复了：

- CVE-2004-0801：CVSS v2 基本得分：7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)：此修补程序最初影响的是 CUPS 中的 foomatic-rip，但发现它也存在于 foomatic-rip-hplip 中。

The foomatic-rip filter, which is part of foomatic-filters package, contains a vulnerability that allows anyone with access to CUPS, local or remote, to execute arbitrary commands on the server. The updated packages provide a fixed foomatic-rip filter that prevents this kind of abuse.

Sebastian Krahmer reported a bug in the cupsomatic and foomatic-rip print filters, used by the CUPS print spooler. An attacker who has printing access could send a carefully named file to the print server causing arbitrary commands to be executed as root. The Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned the name CVE-2004-0801 to this issue.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update of hplip fixes :

  - CVE-2004-0801: CVSS v2 Base Score: 7.5     (AV:N/AC:L/Au:N/C:P/I:P/A:P): This patch originally     affected foomatic-rip in CUPS but was found to be in     foomatic-rip-hplip too.

ID	名稱	產品	系列	已發布	已更新	嚴重性
14730	SUSE-SA:2004:031: cups	Nessus	SuSE Local Security Checks	2004/9/15	2021/1/14	high
14779	GLSA-200409-24 : Foomatic: Arbitrary command execution in foomatic-rip filter	Nessus	Gentoo Local Security Checks	2004/9/21	2021/1/6	high
55981	SuSE 11.1 セキュリティ更新：hplip（SAT パッチ番号 4989）	Nessus	SuSE Local Security Checks	2011/8/26	2021/1/19	high
55981	SuSE 11.1 Security Update : hplip (SAT Patch Number 4989)	Nessus	SuSE Local Security Checks	2011/8/26	2021/1/19	high
27222	openSUSE 10 Security Update : foomatic-filters (foomatic-filters-1436)	Nessus	SuSE Local Security Checks	2007/10/17	2021/1/14	high
55981	SuSE 11.1 安全性更新：hplip (SAT 修補程式編號 4989)	Nessus	SuSE Local Security Checks	2011/8/26	2021/1/19	high
55981	SuSE 11.1 安全更新：hplip（SAT 修补程序编号 4989）	Nessus	SuSE Local Security Checks	2011/8/26	2021/1/19	high
75526	openSUSE セキュリティ更新：hplip（openSUSE-SU-2011:0950-1）	Nessus	SuSE Local Security Checks	2014/6/13	2021/1/14	high
75861	openSUSE セキュリティ更新：hplip（openSUSE-SU-2011:0950-1）	Nessus	SuSE Local Security Checks	2014/6/13	2021/1/14	high
75526	openSUSE 安全性更新：hplip (openSUSE-SU-2011:0950-1)	Nessus	SuSE Local Security Checks	2014/6/13	2021/1/14	high
75861	openSUSE 安全性更新：hplip (openSUSE-SU-2011:0950-1)	Nessus	SuSE Local Security Checks	2014/6/13	2021/1/14	high
75526	openSUSE 安全更新：hplip (openSUSE-SU-2011:0950-1)	Nessus	SuSE Local Security Checks	2014/6/13	2021/1/14	high
75861	openSUSE 安全更新：hplip (openSUSE-SU-2011:0950-1)	Nessus	SuSE Local Security Checks	2014/6/13	2021/1/14	high
14750	Mandrake Linux Security Advisory : printer-drivers (MDKSA-2004:094)	Nessus	Mandriva Local Security Checks	2004/9/16	2021/1/6	high
14789	Fedora Core 2 : foomatic-3.0.1-3.1 (2004-303)	Nessus	Fedora Local Security Checks	2004/9/22	2021/1/11	high
75526	openSUSE Security Update : hplip (openSUSE-SU-2011:0950-1)	Nessus	SuSE Local Security Checks	2014/6/13	2021/1/14	high
75861	openSUSE Security Update : hplip (openSUSE-SU-2011:0950-1)	Nessus	SuSE Local Security Checks	2014/6/13	2021/1/14	high

偵測

搜尋 Plugin

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high