← Database

CVE-2009-0164

MEDIUM CVSS: 6.4 Published: 2009-04-24 Modified: 2026-06-16

Description

The web interface for CUPS before 1.3.10 does not validate the HTTP Host header in a client request, which makes it easier for remote attackers to conduct DNS rebinding attacks.

Affected Platforms

Apple Cups

Weakness Type

CWE-20

References