CVE-2005-2874

The is_path_absolute function in scheduler/client.c for the daemon in CUPS before 1.1.23 allows remote attackers to cause a denial of service (CPU consumption…

published September 13, 2005

CVSS
—
EPSS
3%
Percentile
87.1
In the wild
Unconfirmed
What it is

The is_path_absolute function in scheduler/client.c for the daemon in CUPS before 1.1.23 allows remote attackers to cause a denial of service (CPU consumption by tight loop) via a "..\.." URL in an HTTP request.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02969 · 87.1th percentile
Published
2005-09-13T04:00Z
EPSS history
Timeline
  • 13 SEP 04:00Z
    The is_path_absolute function in scheduler/client.c for the daemon in CUPS before 1.1.23 allows remote attackers to cause a denial of service (CPU consumption…
    cvelistv5