corpus.blog
42,180 blogs · 5,214,511 posts Claim your blog
Record · corpus.blog/posts/01a08775-f43e-7298-86a2-1d64cb57f9bd

Attacking UNIX Systems via CUPS, Part I

evilsocket · published 26 September 2024

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at evilsocket.net Wayback capture
4blogs citing
First cited
30 Sept 2024
Most recent
5 Apr 2026
Rank this month
not ranked
External links
40
Words captured
8,335

Cited by

Blog
In the post
Date
heyitsas.im
Spooler Alert: Remote Unauth'd RCE-to-root Chain in CUPS Read at the source ↗
5 Apr 2026
guillerg.dev
Link roundup (IV) Read at the source ↗
21 Aug 2025
senki.org
Using your Printer Ports to Attack? Read at the source ↗
3 Oct 2024
PentesterLab
Research Worth Reading Week 39/2024 Read at the source ↗
30 Sept 2024

Links from this post

Link
Host
https://www.huawei.com/en/psirt/security-advisories/hw-425408
huawei.com
https://pkgs.org/download/cups-browsed
pkgs.org
https://docs.freebsd.org/en/articles/cups/
docs.freebsd.org
https://source.chromium.org/chromiumos/chromiumos/codesearch/+/main:src/third_party/chromiumos-overlay/net-print/;bpv=1
source.chromium.org
https://issuetracker.google.com/issues/172222838
issuetracker.google.com
https://docs.oracle.com/cd/E23824_01/html/821-1451/cups-intro.html
docs.oracle.com
https://x.com/evilsocket/status/1833878573289025664
x.com
https://pastebin.com/7zzFzxCN
pastebin.com
https://en.wikipedia.org/wiki/CUPS
en.wikipedia.org
https://github.com/OpenPrinting/cups-browsed
github.com
https://man7.org/linux/man-pages/man2/bind.2.html
man7.org
https://github.com/OpenPrinting/cups-browsed/blob/c12b9cf5a906ab16971f5d060f291f9a58edadac/daemon/cups-browsed.c
github.com
https://github.com/google/oss-fuzz/tree/master/projects/cups
github.com
https://github.com/OpenPrinting/cups-browsed/security/advisories/GHSA-rj88-6mr5-rcw8
github.com
https://cwe.mitre.org/data/definitions/200.html
cwe.mitre.org
https://en.wikipedia.org/wiki/Internet_Printing_Protocol
en.wikipedia.org
https://ftp.pwg.org/pub/pwg/ipp/registrations/reg-ippgupa-20171214.pdf
ftp.pwg.org
https://github.com/h2g2bob/ipp-server
github.com
https://github.com/OpenPrinting/libppd/blob/0d90320157135b9ec585617e1545793b274c7f82/ppd/ppd-generator.c
github.com
https://en.wikipedia.org/wiki/PostScript_Printer_Description
en.wikipedia.org
https://web.mit.edu/PostScript/Adobe/Documents/5003.PPD_Spec_v4.3.pdf
web.mit.edu
https://www.cups.org/doc/spec-ppd.html
cups.org
https://linux.die.net/man/1/foomatic-rip
linux.die.net
https://nvd.nist.gov/vuln/detail/CVE-2011-2964
nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2011-2697
nvd.nist.gov
https://github.com/Distrotech/foomatic-filters/commit/20f05ab502d9e7a5bef58de16eca82d3745a7ad9
github.com
https://unix.stackexchange.com/questions/378557/what-is-the-difference-between-cups-filters-and-foomatic-filters
unix.stackexchange.com
https://github.com/OpenPrinting/cups-filters/blob/90f04657ad3cac36ca1bfa96f62f3878166bc8f6/filter/foomatic-rip/foomaticrip.c
github.com
https://nvd.nist.gov/vuln/detail/CVE-2024-35235
nvd.nist.gov
https://github.com/search?q=repo:OpenPrinting/foomatic-db%20foomaticripcommandline&type=code
github.com
https://github.com/OpenPrinting/libcupsfilters/security/advisories/GHSA-w63j-6g73-wmg5
github.com
https://github.com/OpenPrinting/libppd/security/advisories/GHSA-7xfx-47qg-grp6
github.com
https://github.com/OpenPrinting/cups-filters/security/advisories/GHSA-p9rh-jxmq-gq47
github.com
https://github.com/OpenPrinting/cups-browsed/issues/36
github.com
https://x.com/JavierGonzalez/status/1838730623982186773
x.com
https://x.com/evilsocket/status/1838169889330135132
x.com
https://x.com/evilsocket/status/1838220677389656127
x.com
https://www.kb.cert.org/vince
kb.cert.org
https://breachforums.st/Thread-Undisclosed-Linux-Unauth-RCE-as-they-claim-Writeup-from-researcher?pid=844608
breachforums.st
https://bettercap.org/
bettercap.org
Elsewhere on evilsocket.net (3)