CVE-2010-0540
Fixed in a distro release EPSS 1%
Cross-site request forgery (CSRF) vulnerability in the web interface in CUPS before 1.4.4, as used on Apple Mac OS X 10.5.8, Mac OS X 10.6 before 10.6.4, and other platforms, allows remote attackers to hijack the authentication of administrators for requests that change settings.
Products: apple mac_os_x, apple mac_os_x_server
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | cups | 1.4.4-1 |
| Debian 13 | cups | 1.4.4-1 |
| Debian 14 | cups | 1.4.4-1 |
| Debian 5.0 | cups | 1.3.8-1+lenny9 |
| Red Hat Enterprise Linux 3 | cups | 1:1.1.17-13.3.65 |
| Red Hat Enterprise Linux 3 | cups-debuginfo | 1:1.1.17-13.3.65 |
| Red Hat Enterprise Linux 3 | cups-devel | 1:1.1.17-13.3.65 |
| Red Hat Enterprise Linux 3 | cups-libs | 1:1.1.17-13.3.65 |
| Red Hat Enterprise Linux 4 | cups | 1:1.1.22-0.rc1.9.32.el4_8.6 |
| Red Hat Enterprise Linux 4 | cups-debuginfo | 1:1.1.22-0.rc1.9.32.el4_8.6 |
| Red Hat Enterprise Linux 4 | cups-devel | 1:1.1.22-0.rc1.9.32.el4_8.6 |
| Red Hat Enterprise Linux 4 | cups-libs | 1:1.1.22-0.rc1.9.32.el4_8.6 |
| Red Hat Enterprise Linux 5 | cups | 1:1.3.7-18.el5_5.4 |
| Red Hat Enterprise Linux 5 | cups-debuginfo | 1:1.3.7-18.el5_5.4 |
| Red Hat Enterprise Linux 5 | cups-devel | 1:1.3.7-18.el5_5.4 |
| Red Hat Enterprise Linux 5 | cups-libs | 1:1.3.7-18.el5_5.4 |
| Red Hat Enterprise Linux 5 | cups-lpd | 1:1.3.7-18.el5_5.4 |
| openSUSE Tumbleweed | cups | 2.1.3-2.3 |