CVE-2010-1748

Publication date 17 June 2010

Last updated 24 July 2024

Ubuntu priority

The cgi_initialize_string function in cgi-bin/var.c in the web interface in CUPS before 1.4.4, as used on Apple Mac OS X 10.5.8, Mac OS X 10.6 before 10.6.4, and other platforms, does not properly handle parameter values containing a % (percent) character without two subsequent hex characters, which allows context-dependent attackers to obtain sensitive information from cupsd process memory via a crafted request, as demonstrated by the (1) /admin?OP=redirect&URL=% and (2) /admin?URL=/admin/&OP=% URIs.

Status

Show unmaintained releases

Package	Ubuntu Release	Status
cups	10.04 LTS lucid	Fixed 1.4.3-1ubuntu1.2
	9.10 karmic	Fixed 1.4.1-5ubuntu2.6
	9.04 jaunty	Fixed 1.3.9-17ubuntu3.9
	8.04 LTS hardy	Not in release
	6.06 LTS dapper	Not in release
cupsys	10.04 LTS lucid	Not in release
	9.10 karmic	Not in release
	9.04 jaunty	Not in release
	8.04 LTS hardy	Fixed 1.3.7-1ubuntu3.11
	6.06 LTS dapper	Fixed 1.2.2-0ubuntu0.6.06.19

CVE-2010-1748

Status

References

Related Ubuntu Security Notices (USN)

Other references