Back to feed
EUVD-2005-2875 · Published Sep 13, 2005
The is_path_absolute function in scheduler/client.c for the daemon in CUPS before 1.1.23 allows remote attackers to cause a denial of service (CPU consumption by tight loop) via a "..\.." URL in an HTTP request.
Technologies
Easy_Software_Products Cups
Weaknesses
NVD-CWE-Other
CVSS scores
- v2.05.0
AV:N/AC:L/Au:N/C:N/I:N/A:P
MITRE ATT&CK
InferredWhere this vulnerability fits in an attack
Initial Access
References
Potentially impacted assets
See if this affects your attack surface
