NetSight
IP …
medium5.0

CVE-2010-2432

The cupsDoAuthentication function in auth.c in the client in CUPS before 1.4.4, when HAVE_GSSAPI is omitted, does not properly handle a demand for authorizatio…

Impact

The cupsDoAuthentication function in auth.c in the client in CUPS before 1.4.4, when HAVE_GSSAPI is omitted, does not properly handle a demand for authorization, which allows remote CUPS servers to cause a denial of service (infinite loop) via HTTP_UNAUTHORIZED responses.

Affected products

VendorProductAffected versions
AppleCups
through 1.4.3
Versions 1.1, 1.1.1, 1.1.2, 1.1.3, 1.1.4

Weakness classification

CWE-399

References