GCVE - cpe:2.3:a:easy_software_products:cups:1.1.16:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:easy_software_products:cups:1.1.16:*:*:*:*:*:*:*

part: a version: 1.1.16 update: *

Vendor	Easy Software Products (`819fa972-978c-5445-8d09-94d0d47feee2`)
Product	Cups (`5ecbfb19-4836-5955-919d-46235b7dd049`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2005-2874`	vulnerable	2026-06-08 04:48:30.782557	Details available The is_path_absolute function in scheduler/client.c for the daemon in CUPS before 1.1.23 allows remote attackers to cause a denial of service (CPU consumption by tight loop) via a "..\.." URL in an HTTP request. Published: 2005-09-13T04:00:00.000Z Updated: 2024-08-07T22:53:29.901Z Open on db.gcve.eu Reference links http://lwn.net/Alerts/152835/ http://www.cups.org/relnotes.php#010123 https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=168072 http://securitytracker.com/id?1012811 http://www.redhat.com/support/errata/RHSA-2005-772.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2005-0206`	vulnerable	2026-06-08 04:48:11.807833	Details available The patch for integer overflow vulnerabilities in Xpdf 2.0 and 3.0 (CVE-2004-0888) is incomplete for 64-bit architectures on certain Linux distributions such as Red Hat, which could leave Xpdf users exposed to the original vulnerabilities. Published: 2005-02-15T05:00:00.000Z Updated: 2024-08-07T21:05:25.397Z Open on db.gcve.eu Reference links https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11107 http://www.mandriva.com/security/advisories?name=MDKSA-2005:041 http://www.securityfocus.com/bid/11501 http://www.redhat.com/support/errata/RHSA-2005-034.html http://www.mandriva.com/security/advisories?name=MDKSA-2005:056	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2004-1270`	vulnerable	2026-06-08 04:47:53.467333	Details available lppasswd in CUPS 1.1.22, when run in environments that do not ensure that file descriptors 0, 1, and 2 are open when lppasswd is called, does not verify that the passwd.new file is different from STDERR, which allows local users to control output to passwd.new via certain user input that triggers an error message. Published: 2004-12-22T05:00:00.000Z Updated: 2024-08-08T00:46:12.304Z Open on db.gcve.eu Reference links http://www.redhat.com/support/errata/RHSA-2005-013.html https://exchange.xforce.ibmcloud.com/vulnerabilities/18609 http://www.mandriva.com/security/advisories?name=MDKSA-2005:008 http://www.redhat.com/support/errata/RHSA-2005-053.html https://usn.ubuntu.com/50-1/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2004-1269`	vulnerable	2026-06-08 04:47:53.466425	Details available lppasswd in CUPS 1.1.22 does not remove the passwd.new file if it encounters a file-size resource limit while writing to passwd.new, which causes subsequent invocations of lppasswd to fail. Published: 2004-12-22T05:00:00.000Z Updated: 2024-08-08T00:46:12.347Z Open on db.gcve.eu Reference links http://www.redhat.com/support/errata/RHSA-2005-013.html https://exchange.xforce.ibmcloud.com/vulnerabilities/18608 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9545 http://www.mandriva.com/security/advisories?name=MDKSA-2005:008 http://www.redhat.com/support/errata/RHSA-2005-053.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2004-1268`	vulnerable	2026-06-08 04:47:53.464960	Details available lppasswd in CUPS 1.1.22 ignores write errors when modifying the CUPS passwd file, which allows local users to corrupt the file by filling the associated file system and triggering the write errors. Published: 2004-12-22T05:00:00.000Z Updated: 2024-08-08T00:46:12.268Z Open on db.gcve.eu Reference links http://www.redhat.com/support/errata/RHSA-2005-013.html https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10398 http://www.mandriva.com/security/advisories?name=MDKSA-2005:008 http://www.redhat.com/support/errata/RHSA-2005-053.html https://usn.ubuntu.com/50-1/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2004-1267`	vulnerable	2026-06-08 04:47:53.460140	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2004-0927`	vulnerable	2026-06-08 04:47:51.949609	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2004-0926`	vulnerable	2026-06-08 04:47:51.948379	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2004-0924`	vulnerable	2026-06-08 04:47:51.946560	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2004-0923`	vulnerable	2026-06-08 04:47:51.937498	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2004-0889`	vulnerable	2026-06-08 04:47:51.771715	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2004-0888`	vulnerable	2026-06-08 04:47:51.745975	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2003-0788`	vulnerable	2026-06-08 04:47:22.505687	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Cups

Notes

PURL mappings

Vulnerability references

Contribute