This script is Copyright (C) 2015 Tenable Network Security, Inc.
The remote openSUSE host is missing a security update.
This update fixes the following issues :
- CVE-2015-1158 and CVE-2015-1159 fixes a possible
privilege escalation via cross-site scripting and bad
print job submission used to replace cupsd.conf on
server (CUPS STR#4609 CERT-VU-810572 CVE-2015-1158
CVE-2015-1159 bugzilla.suse.com bsc#924208). In general
it is crucial to limit access to CUPS to trustworthy
users who do not misuse their permission to submit print
jobs which means to upload arbitrary data onto the CUPS
ngs and cf. the entries about CVE-2012-5519 below.
See also :
Update the affected cups packages.
Risk factor :
Critical / CVSS Base Score : 10.0