Description
The web interface for CUPS before 1.3.10 does not validate the HTTP Host header in a client request, which makes it easier for remote attackers to conduct DNS rebinding attacks.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | cups | 1.3.10-1 | — |
| Debian 13 | cups | 1.3.10-1 | — |
| Debian 12 | cups | 1.3.10-1 | — |
References
- https://bugzilla.redhat.com/show_bug.cgi?id=490597
- GLSA-200904-20 vendor-advisory
- http://www.cups.org/str.php?L3118
- http://www.cups.org/articles.php?L582
- http://support.apple.com/kb/HT3549
- http://wiki.rpath.com/Advisories:rPSA-2009-0061
- 35074 third-party-advisory
- APPLE-SA-2009-05-12 vendor-advisory
- 20090417 rPSA-2009-0061-1 cups mailing-list
- TA09-133A third-party-advisory
- http://bugs.gentoo.org/show_bug.cgi?id=263070
- ADV-2009-1297 vdb-entry
- 34665 vdb-entry