This host is running CUPS (Common UNIX Printing System) Service, which is prone to Buffer Overflow and Integer Overflow Vulnerabilities.

Successful exploitation allows remote attackers to execute arbitrary code or compromise a vulnerable system. Impact Level: System

Upgrade to CUPS version 1.3.9 http://www.cups.org/software.php

The flaws are due to - an error in the implementation of the HP-GL/2 filter and can be exploited to cause buffer overflows with HP-GL/2 files containing overly large pen numbers. - an error within the read_rle8() and read_rle16() functions when parsing malformed Run Length Encoded(RLE) data within Silicon Graphics Image(SGI) files and can exploited to cause heap-based buffer overflow with a specially crafted SGI file. - an error within the WriteProlog() function included in the texttops utility and can be exploited to cause a heap-based buffer overflow with specially crafted file.

CUPS versions prior to 1.3.9

• http://cups.org/articles.php?L575
• http://secunia.com/advisories/32226/
• http://www.frsirt.com/english/advisories/2008/2782/

---

Updated on 2015-03-25