← Database

CVE-2010-2432

MEDIUM CVSS: 5.0 Published: 2010-06-22 Modified: 2026-06-16

Description

The cupsDoAuthentication function in auth.c in the client in CUPS before 1.4.4, when HAVE_GSSAPI is omitted, does not properly handle a demand for authorization, which allows remote CUPS servers to cause a denial of service (infinite loop) via HTTP_UNAUTHORIZED responses.

Affected Platforms

Apple Cups

Weakness Type

CWE-399

References