Free and open-source vulnerability scanner
Mageni eases for you the vulnerability scanning, assessment, and management process. It is free and open-source.
Install NowAvailable for macOS, Windows, and Linux
Debian Security Advisory DSA 566-1 (cupsys)
Information
Severity
Severity
Family
Family
CVSSv2 Base
CVSSv2 Base
CVSSv2 Vector
CVSSv2 Vector
Solution Type
Solution Type
Created
Created
Modified
Modified
Summary
The remote host is missing an update to cupsys announced via advisory DSA 566-1.
Insight
Insight
An information leak has been detected in CUPS, the Common UNIX Printing System, which may lead to the disclosure of sensitive information, such as user names and passwords which are written into log files. The used patch only eliminates the authentication information in the device URI which is logged in the error_log file. It does not eliminate the URI from the environment and process table, which is why the CUPS developers recommend that system administrators do not code authentication information in device URIs in the first place. For the stable distribution (woody) this problem has been fixed in version 1.1.14-5woody7. For the unstable distribution (sid) this problem has been fixed in version 1.1.20final+rc1-9. We recommend that you upgrade your CUPS package.
Solution
Solution
https://secure1.securityspace.com/smysecure/catid.html?in=DSA%20566-1