Russian Vulnerability Scanner Database

Back to List

CVE-2015-1159

Scores

EPSS

0.588medium58.8%
0%20%40%60%80%100%

Percentile: 58.8%

CVSS

4.3medium2.0
0246810

CVSS Score: 4.3/10

All CVSS Scores

CVSS 2.0
4.3

Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N

Description

Cross-site scripting (XSS) vulnerability in the cgi_puts function in cgi-bin/template.c in the template engine in CUPS before 2.0.3 allows remote attackers to inject arbitrary web script or HTML via the QUERY parameter to help/.

Scaner-VS 7 — a modern vulnerability management solution

Uses this database for vulnerability detection. High-speed search, cross-platform, advanced configuration audit, and flexible filtering. Suitable for organizations of any size.
Learn more about Scaner-VS 7

Sources

debiannvdredhatubuntu

CWEs

CWE-79

Related Vulnerabilities

BDU:2015-10516

Recommendations

Source: nvd

All CUPS users should upgrade to the latest version:
# emerge –sync
# emerge –ask –oneshot –verbose “>=net-print/cups-2.0.3”

URL: https://security.gentoo.org/glsa/201510-07

Vulnerable Software (7)

Type: Configuration

Product: cups

Operating System: rhel 6

Trait: 
{  "fixed": "1.4.2-67.el6_6.1"}

Source: redhat

Type: Configuration

Product: cups

Operating System: rhel 7

Trait: 
{  "fixed": "1.6.3-17.el7_1.1"}

Source: redhat

Type: Configuration

Product: cups

Operating System: ubuntu trusty 14.04

Trait: 
{  "fixed": "1.7.2-0ubuntu1.6"}

Source: ubuntu

Type: Configuration

Product: cups

Operating System: ubuntu utopic 14.10

Trait: 
{  "fixed": "1.7.5-3ubuntu3.2"}

Source: ubuntu

Type: Configuration

Product: cups

Operating System: ubuntu vivid 15.04

Trait: 
{  "fixed": "2.0.2-1ubuntu3.1"}

Source: ubuntu

Type: Configuration

Product: cups

Operating System: debian

Trait: 
{  "fixed": "1.7.5-12"}

Source: debian

Type: Configuration

Vendor: *

Product: cups

Operating System: * * *

Trait: 
{  "cpe_match": [    {      "cpe23uri": "cpe:2.3:a:cups:cups:*:*:*:*:*:*:*:*",      "versionEndIncluding": "2.0.2",      "vulnerable": true    }  ],  "operator": "OR"}

Source: nvd

End of list