Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

CVE-2009-2820

EPSS 1.99% · P84
Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2009-2820

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
The web interface in CUPS before 1.4.2, as used on Apple Mac OS X before 10.6.2 and other platforms, does not properly handle (1) HTTP headers and (2) HTML templates, which allows remote attackers to conduct cross-site scripting (XSS) attacks and HTTP response splitting attacks via vectors related to (a) the product's web interface, (b) the configuration of the print system, and (c) the titles of printed jobs, as demonstrated by an XSS attack that uses the kerberos parameter to the admin program, and leverages attribute injection and HTTP Parameter Pollution (HPP) issues.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
Apple Mac OS X CUPS跨站脚本攻击漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Mac OS X是苹果家族机器所使用的操作系统。 基于Apple Mac OS X 10.6.2之前版本及其他平台的CUPS 1.4.2之前版本的web界面不能正确处理HTTP头和HTML模板。远程攻击者可借助与产品web界面，打印系统配置和打印作业标题有关的向量执行跨站脚本攻击和HTTP响应拆分攻击。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

VendorProductAffected VersionsCPESubscribe
-n/a n/a -

II. Public POCs for CVE-2009-2820

#POC DescriptionSource LinkShenlong Link
AI-Generated POCPremium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2009-2820

请登录查看更多情报信息。

Same Patch Batch · n/a · 2009-11-10 · 29 CVEs total

CVE-2009-2828Apple Mac OS X 内存破坏漏洞
CVE-2009-3930Christos Zoulas多个整数溢出漏洞
CVE-2009-2840Apple Mac OS X "Spotlight" 用户授权和访问控制漏洞
CVE-2009-2839Apple Mac OS X "Screen Sharing" 多个内存破坏漏洞
CVE-2009-2838Apple Mac OS X "QuickLook" 整数溢出漏洞
CVE-2009-2837Apple Mac OS X "QuickDraw Manager" 堆溢出漏洞
CVE-2009-2836Apple Mac OS X "Login Window"竞争条件认证绕过漏洞
CVE-2009-2835Apple Mac OS X 内核信息泄露漏洞
CVE-2009-2834Apple Mac OS X "IOKit"权限许可和访问控制漏洞
CVE-2009-2833Apple Mac OS X UCCompareTextDefault API缓冲区溢出漏洞
CVE-2009-2832Apple Mac OS X "FTP Server" 缓冲区溢出漏洞
CVE-2009-2831Apple Mac OS X "Dictionary" 代码执行漏洞
CVE-2009-2830Apple Mac OS X "Christos Zoulas"文件多个缓冲区溢出漏洞
CVE-2009-2829Apple Mac OS X "Event Monitor" 日志注入漏洞
CVE-2009-3923Sun Virtual Desktop Infrastructure 身份认证机制未授权访问漏洞
CVE-2009-2827Apple Mac OS X "Disk Images" 堆溢出漏洞
CVE-2009-2826Apple Mac OS X "CoreGraphics" 多个整数溢出漏洞
CVE-2009-2825Apple Mac OS X "Certificate Assistant" 中间人攻击漏洞
CVE-2009-2824Apple Mac OS X "Apple Type Services" 多个缓冲区溢出漏洞
CVE-2009-2823Apple Mac OS X "Apache HTTP Server" 跨站脚本攻击漏洞

Showing top 20 of 29 CVEs. View all on vendor page → →

IV. Related Vulnerabilities

Same product: n/a
Same vendor: n/a

V. Comments for CVE-2009-2820

No comments yet

Leave a comment