CVE-2015-1159 : Cross-site scripting (XSS) vulnerability in the cgi_puts function in cgi-bin/template.c in the template engine in CUPS b

Cross-site scripting (XSS) vulnerability in the cgi_puts function in cgi-bin/template.c in the template engine in CUPS before 2.0.3 allows remote attackers to inject arbitrary web script or HTML via the QUERY parameter to help/.

Published 2015-06-26 10:59:02

Updated 2017-09-23 01:29:01

Source Apple Inc.

View at NVD, CVE.org

Vulnerability category: Cross site scripting (XSS)

Threat overview for CVE-2015-1159

Top countries where our scanners detected CVE-2015-1159

Top open port discovered on systems with this issue 631

IPs affected by CVE-2015-1159 72,337

Threat actors abusing to this issue? Yes

Find out if you^* are affected by CVE-2015-1159!

^*Directly or indirectly through your vendors, service providers and 3rd parties. Powered by attack surface intelligence from SecurityScorecard.

Exploit prediction scoring system (EPSS) score for CVE-2015-1159

EPSS FAQ

78.00%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 98 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2015-1159

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source	First Seen
4.3	MEDIUM	AV:N/AC:M/Au:N/C:N/I:P/A:N	8.6	2.9	NIST
Access Vector: Network Access Complexity: Medium Authentication: None Confidentiality Impact: None Integrity Impact: Partial Availability Impact: None

CWE ids for CVE-2015-1159

CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Assigned by: nvd@nist.gov (Primary)

References for CVE-2015-1159

http://www.securityfocus.com/bid/75106

CUPS CVE-2015-1159 Cross Site Scripting Vulnerability
Third Party Advisory;VDB Entry
http://googleprojectzero.blogspot.in/2015/06/owning-internet-printing-case-study-in.html

Project Zero: Owning Internet Printing - A Case Study in Modern Software Exploitation
Technical Description

CVEs referencing this url
http://www.securitytracker.com/id/1032556

CUPS Bugs Let Remote Users Gain Elevated Privileges and Conduct Cross-Site Scripting Attacks - SecurityTracker

CVEs referencing this url
http://www.kb.cert.org/vuls/id/810572

VU#810572 - CUPS print service is vulnerable to privilege escalation and cross-site scripting
Third Party Advisory;US Government Resource

CVEs referencing this url
http://www.cups.org/blog.php?L1082

CUPS 2.0.3 - CUPS.org
Vendor Advisory

CVEs referencing this url
http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00003.html

[security-announce] SUSE-SU-2015:1041-1: critical: Security update for c

CVEs referencing this url
https://bugzilla.redhat.com/show_bug.cgi?id=1221642

1221642 – (CVE-2015-1159) CVE-2015-1159 cups: cross-site scripting flaw in CUPS web UI (VU#810572)
Issue Tracking
http://www.debian.org/security/2015/dsa-3283

Debian -- Security Information -- DSA-3283-1 cups

CVEs referencing this url
https://www.cups.org/str.php?L4609

CERT VU#810572: Privilege escalation through dynamic linker and isolated vulnerabilities · Issue #4609 · apple/cups · GitHub
Vendor Advisory

CVEs referencing this url
http://www.ubuntu.com/usn/USN-2629-1

USN-2629-1: CUPS vulnerabilities | Ubuntu security notices

CVEs referencing this url
https://bugzilla.opensuse.org/show_bug.cgi?id=924208

Bug 924208 – VUL-0: CVE-2015-1158 CVE-2015-1159: cups: privilege escalation via cross-site scripting and bad print job submission used to replace cupsd.conf on server (plus weird ld.so interaction)
Issue Tracking

CVEs referencing this url
http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00006.html

[security-announce] SUSE-SU-2015:1044-1: critical: Security update for c

CVEs referencing this url
http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10702

Juniper Networks - 2015-10 Security Bulletin: QFabric 3100 Director: CUPS printing system Improper Update of Reference Count leads to remote chained vulnerability attack via XSS against authenticated
Third Party Advisory

CVEs referencing this url
https://code.google.com/p/google-security-research/issues/detail?id=455

455 - Placeholder: PoC for cupsd exploit of string reference count over decrement - project-zero - Monorail
Exploit

CVEs referencing this url
http://rhn.redhat.com/errata/RHSA-2015-1123.html

RHSA-2015:1123 - Security Advisory - Red Hat Customer Portal

CVEs referencing this url
https://security.gentoo.org/glsa/201510-07

CUPS: Multiple vulnerabilities (GLSA 201510-07) — Gentoo security
Third Party Advisory;VDB Entry

CVEs referencing this url
http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00010.html

[security-announce] openSUSE-SU-2015:1056-1: critical: Security update f

CVEs referencing this url

Products affected by CVE-2015-1159

Cups » Cups
Versions up to, including, (<=) 2.0.2
cpe:2.3:a:cups:cups:*:*:*:*:*:*:*:*
Matching versions

This web site uses cookies for managing your session, storing preferences, website analytics and additional purposes described in our privacy policy.
By using this web site you are agreeing to CVEdetails.com terms of use!