CVE-2004-0558 PoC — CUPS UDP数据包远程服务拒绝漏洞

Source

https://github.com/fibonascii/CVE-2004-0558

Associated Vulnerability

Title:CUPS UDP数据包远程服务拒绝漏洞 (CVE-2004-0558)
Description:The Internet Printing Protocol (IPP) implementation in CUPS before 1.1.21 allows remote attackers to cause a denial of service (service hang) via a certain UDP packet to the IPP port.

Readme

This is a proof of concept exploit for CVE-2004-0558
Specific versions of CUPs (1.1.x) are vulnerable to a Denial of Service attack when sent a zero-length UDP packet
https://www.exploit-db.com/exploits/24599/

It's worth noting that this can be achieved with nmap, and this exploit was developed for research and educational purposes.


Usage:

python kill-cups.py -t 192.168.1.91


Additional command line flags were included for research purposes. UDP requires that the packet header requires an arbitrary source port.
In the exploit I have it default to 4321 but this can changed if necessary

python kill-cups.py -t 192.168.1.91 --source-port 5555

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →