National Cyber-Alert System

Vulnerability Summary for CVE-2007-4045

Overview

The CUPS service, as used in SUSE Linux before 20070720 and other Linux distributions, allows remote attackers to cause a denial of service via unspecified vectors related to an incomplete fix for CVE-2007-0720 that introduced a different denial of service problem in SSL negotiation.

Impact

CVSS Severity (version 2.0):

CVSS Version 2 Metrics:

Vendor Statments (disclaimer)

Official Statement from Red Hat (11/09/2007)

The Red Hat Security Response Team has rated this issue as having low security impact. Updates to correct this are available: https://rhn.redhat.com/cve/CVE-2007-4045.html

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving NIST webspace. We have provided these links to other web sites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other web sites that are more appropriate for your purpose. NIST does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, NIST does not endorse any commercial products that may be mentioned on these sites. Please address comments about this page to nvd@nist.gov.

External Source: FEDORA

Name: FEDORA-2007-3100

Hyperlink:https://www.redhat.com/archives/fedora-package-announce/2007-November/msg00238.html

External Source: CONFIRM

Name: https://bugzilla.redhat.com/show_bug.cgi?id=250161

Hyperlink:https://bugzilla.redhat.com/show_bug.cgi?id=250161

External Source: BID

Name: 26524

Hyperlink:http://www.securityfocus.com/bid/26524

External Source: REDHAT

Name: RHSA-2007:1023

Hyperlink:http://www.redhat.com/support/errata/RHSA-2007-1023.html

External Source: REDHAT

Name: RHSA-2007:1022

Hyperlink:http://www.redhat.com/support/errata/RHSA-2007-1022.html

External Source: SUSE

Name: SUSE-SR:2007:014

Hyperlink:http://www.novell.com/linux/security/advisories/2007_14_sr.html

External Source: GENTOO

Name: GLSA-200712-14

Hyperlink:http://www.gentoo.org/security/en/glsa/glsa-200712-14.xml

External Source: CONFIRM

Name: http://support.avaya.com/elmodocs2/security/ASA-2007-476.htm

Hyperlink:http://support.avaya.com/elmodocs2/security/ASA-2007-476.htm

External Source: SECUNIA

Name: 28113

Type: Advisory

Hyperlink:http://secunia.com/advisories/28113

External Source: SECUNIA

Name: 27615

Type: Advisory

Hyperlink:http://secunia.com/advisories/27615

External Source: SECUNIA

Name: 27577

Type: Advisory

Hyperlink:http://secunia.com/advisories/27577

External Source: CONFIRM

Name: http://bugs.gentoo.org/show_bug.cgi?id=199195

Hyperlink:http://bugs.gentoo.org/show_bug.cgi?id=199195

External Source: MANDRIVA

Name: MDVSA-2008:036

Hyperlink:http://www.mandriva.com/security/advisories?name=MDVSA-2008:036