CVE-2002-1367
Common Unix Printing System (CUPS) 1.1.14 through 1.1.17 allows remote attackers to add printers...
Common Unix Printing System (CUPS) 1.1.14 through 1.1.17 allows remote attackers to add printers without authentication via a certain UDP packet, which can then be used to perform unauthorized activities such as stealing the local root certificate for the administration server via a "need authorization" page, as demonstrated by new-coke.
Exploit likelihood
What each source reports
NVD Score used
Common Unix Printing System (CUPS) 1.1.14 through 1.1.17 allows remote attackers to add printers without authentication via a certain UDP packet, which can then be used to perform unauthorized activities such as stealing the local root certificate for the administration server via a "need authorization" page, as demonstrated by new-coke.
- Record
CVE-2002-1367- CVSS 2.0
- 10.0 High
AV:N/AC:L/Au:N/C:C/I:C/A:C - Updated
- 2026-11-02
CVE List No score
Common Unix Printing System (CUPS) 1.1.14 through 1.1.17 allows remote attackers to add printers without authentication via a certain UDP packet, which can then be used to perform unauthorized activities such as stealing the local root certificate for the administration server via a "need authorization" page, as demonstrated by new-coke.
- Record
CVE-2002-1367- Updated
- 2026-11-02
EUVDEUVD-2002-1351 No score
Common Unix Printing System (CUPS) 1.1.14 through 1.1.17 allows remote attackers to add printers without authentication via a certain UDP packet, which can then be used to perform unauthorized activities such as stealing the local root certificate for the administration server via a "need authorization" page, as demonstrated by new-coke.
- Record
EUVD-2002-1351- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-qjpg-cf6h-2fr2 No score
Common Unix Printing System (CUPS) 1.1.14 through 1.1.17 allows remote attackers to add printers...
Common Unix Printing System (CUPS) 1.1.14 through 1.1.17 allows remote attackers to add printers without authentication via a certain UDP packet, which can then be used to perform unauthorized activities such as stealing the local root certificate for the administration server via a "need authorization" page, as demonstrated by new-coke.
- Record
GHSA-qjpg-cf6h-2fr2- Updated
- 2026-11-02
OSV No score
Common Unix Printing System (CUPS) 1.1.14 through 1.1.17 allows remote attackers to add printers without authentication via a certain UDP packet, which can then be used to perform unauthorized activities such as stealing the local root certificate for the administration server via a "need authorization" page, as demonstrated by new-coke.
- Record
CVE-2002-1367- Updated
- 2026-11-02
OSVDEBIAN-CVE-2002-1367 No score
Common Unix Printing System (CUPS) 1.1.14 through 1.1.17 allows remote attackers to add printers without authentication via a certain UDP packet, which can then be used to perform unauthorized activities such as stealing the local root certificate for the administration server via a "need authorization" page, as demonstrated by new-coke.
- Record
DEBIAN-CVE-2002-1367- Updated
- 2026-11-02
Affected products
Affected packages
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2002-1367 is a high vulnerability (CVSS 10.0) in Easy Software Products Cups, published December 26, 2002. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 3.68%, the 89th percentile. Fixed in cups 1.1.18-1.
References
archives.neohapsis.com/archives/vulnwatch/2002-q4/0117.html
distro.conectiva.com.br/atualizacoes?id=a&anuncio=000702
debian.org/security/2003/dsa-232
novell.com/linux/security/advisories/2003_002_cups.html
idefense.com/advisory/12.19.02.txt
redhat.com/support/errata/RHSA-2002-295.html
Show 7 moreShow less
marc.info?l=bugtraq&m=104032149026670&w=2
mandrakesoft.com/security/advisories?name=MDKSA-2003:001
securityfocus.com/bid/6436
exchange.xforce.ibmcloud.com/vulnerabilities/10908
nvd.nist.gov/vuln/detail/CVE-2002-1367
github.com/advisories/GHSA-qjpg-cf6h-2fr2
security-tracker.debian.org/tracker/CVE-2002-1367