CVE-2010-1748 Information disclosure in n/a
Attackers can read sensitive memory from the CUPS daemon by sending crafted requests with malformed percent characters in the web interface.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2010-1748?
CVE-2010-1748 is a medium-severity vulnerability in Apple Cups, published on 17 Jun 2010. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
The cgi_initialize_string function in cgi-bin/var.c in the web interface in CUPS before 1.4.4, as used on Apple Mac OS X 10.5.8, Mac OS X 10.6 before 10.6.4, and other platforms, does not properly handle parameter values containing a % (percent) character without two subsequent hex characters, which allows context-dependent attackers to obtain sensitive information from cupsd process memory via a crafted request, as demonstrated by the (1) /admin?OP=redirect&URL=% and (2) /admin?URL=/admin/&OP=% URIs.
Weakness: CWE-119
Which versions are affected by CVE-2010-1748?
It affects 1 product.
Products include Apple Cups.
How do I fix CVE-2010-1748?
Upgrade to a fixed version.
Is CVE-2010-1748 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2010-1748 exists.
Public exploit code: 1 Exploit-DB entry.
Other vulnerabilities in Apple Cups
Sources
Also known as DEBIAN-CVE-2010-1748, GHSA-vcrj-62jj-6wf5.