Mandriva Linux Security Advisory : cups (MDVSA-2008:036)
High Nessus Plugin ID 37571
SynopsisThe remote Mandriva Linux host is missing one or more security updates.
DescriptionWei Wang found that the SNMP discovery backend in CUPS did not correctly calculate the length of strings. If a user could be tricked into scanning for printers, a remote attacker could send a specially crafted packet and possibly execute arbitrary code (CVE-2007-5849).
As well, the fix for CVE-2007-0720 in MDKSA-2007:086 caused another denial of service regression within SSL handling (CVE-2007-4045).
The updated packages have been patched to correct these issues.
SolutionUpdate the affected packages.