Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
7.5

CUPS can run malicious code via long attribute names

CVE-2002-0063 · published 24 years ago
Summary

The printing system CUPS (up to version 1.1.13) can be tricked by sending unusually long attribute names or language settings, causing it to crash and possibly run unwanted code. This could let attackers take control of the affected server. Update CUPS to version 1.1.14 or later to close the problem.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software
VendorProductAffected versions
easy_software_products cups <= 1.1.14
cpe:2.3:a:easy_software_products:cups:*:*:*:*:*:*:*:*
Original advisory text
Buffer overflow in ippRead function of CUPS before 1.1.14 may allow attackers to execute arbitrary code via long attribute names or language values.
Buffer overflow in ippRead function of CUPS before 1.1.14 may allow attackers to execute arbitrary code via long attribute names or language values.
References
Fix within
Internet-facing 14 days
Internal 60 days
  • Not known to be exploited
  • Can be exploited automatically (estimated)
  • Gives an attacker partial control (estimated)
Severity
7.5 High
Exploitation
4% chance of attack within 30 days
Timeline
Published8 Mar 2002
Updated23 Oct 2026
First seen29 Sep 2026
Sources
CVE-2002-0063 · NVD
Track software like this
Free during beta