CVE-2002-1367
Fixed in a distro release EPSS 4%
Common Unix Printing System (CUPS) 1.1.14 through 1.1.17 allows remote attackers to add printers without authentication via a certain UDP packet, which can then be used to perform unauthorized activities such as stealing the local root certificate for the administration server via a "need authorization" page, as demonstrated by new-coke.
Products: easy_software_products cups, apple mac_os_x
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | cups | 1.1.18-1 |
| Debian 13 | cups | 1.1.18-1 |
| Debian 14 | cups | 1.1.18-1 |
| Debian 3.0 | cupsys | 1.1.14-4.3 |