{"id":"CVE-2010-1748","aliases":["DEBIAN-CVE-2010-1748","DSA-2176-1","EUVD-2010-1768","GHSA-vcrj-62jj-6wf5","RHSA-2010:0490","openSUSE-SU-2024:10075-1"],"status":"published","title":"The cgi_initialize_string function in cgi-bin/var.c in the web interface in CUPS before 1.4.4, as...","description":"The cgi_initialize_string function in cgi-bin/var.c in the web interface in CUPS before 1.4.4, as used on Apple Mac OS X 10.5.8, Mac OS X 10.6 before 10.6.4, and other platforms, does not properly handle parameter values containing a % (percent) character without two subsequent hex characters, which allows context-dependent attackers to obtain sensitive information from cupsd process memory via a crafted request, as demonstrated by the (1) /admin?OP=redirect\u0026URL=% and (2) /admin?URL=/admin/\u0026OP=% URIs.","severity":{"version":"2.0","score":4.3,"vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-07","score":0.06468,"percentile":0.93784,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":true},"cwes":["CWE-119"],"published":"2010-06-17T16:00:00Z","modified":"2026-10-23T17:47:30Z","exploits":[{"source":"exploitdb","id":"EDB-34152","title":"CUPS 1.4.2 - Web Interface Information Disclosure","type":"remote","platform":"linux","date":"2010-06-15","verified":true,"url":"https://www.exploit-db.com/exploits/34152"}],"fixes":[{"ecosystem":"Debian:12","package":"cups","fixed_in":["1.4.4-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"cups","fixed_in":["1.4.4-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"cups","fixed_in":["1.4.4-1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"cups","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.4-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"cups","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.4-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"cups","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.4-1"}]}]},{"source":"osv","ecosystem":"Debian:5.0","package":"cups","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.8-1+lenny9"}]}],"versions":["1.3.8-1+lenny6","1.3.8-1+lenny7","1.3.8-1+lenny8","1.3.8-1lenny4.1","1.3.8-1lenny5"],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::as","package":"cups","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.17-13.3.65"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::as","package":"cups-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.17-13.3.65"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::as","package":"cups-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.17-13.3.65"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::as","package":"cups-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.17-13.3.65"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::desktop","package":"cups","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.17-13.3.65"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::desktop","package":"cups-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.17-13.3.65"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::desktop","package":"cups-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.17-13.3.65"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::desktop","package":"cups-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.17-13.3.65"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::es","package":"cups","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.17-13.3.65"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::es","package":"cups-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.17-13.3.65"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::es","package":"cups-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.17-13.3.65"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::es","package":"cups-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.17-13.3.65"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::ws","package":"cups","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.17-13.3.65"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::ws","package":"cups-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.17-13.3.65"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::ws","package":"cups-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.17-13.3.65"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::ws","package":"cups-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.17-13.3.65"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::as","package":"cups","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.22-0.rc1.9.32.el4_8.6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::as","package":"cups-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.22-0.rc1.9.32.el4_8.6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::as","package":"cups-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.22-0.rc1.9.32.el4_8.6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::as","package":"cups-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.22-0.rc1.9.32.el4_8.6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::desktop","package":"cups","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.22-0.rc1.9.32.el4_8.6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::desktop","package":"cups-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.22-0.rc1.9.32.el4_8.6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::desktop","package":"cups-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.22-0.rc1.9.32.el4_8.6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::desktop","package":"cups-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.22-0.rc1.9.32.el4_8.6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::es","package":"cups","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.22-0.rc1.9.32.el4_8.6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::es","package":"cups-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.22-0.rc1.9.32.el4_8.6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::es","package":"cups-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.22-0.rc1.9.32.el4_8.6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::es","package":"cups-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.22-0.rc1.9.32.el4_8.6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::ws","package":"cups","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.22-0.rc1.9.32.el4_8.6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::ws","package":"cups-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.22-0.rc1.9.32.el4_8.6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::ws","package":"cups-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.22-0.rc1.9.32.el4_8.6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::ws","package":"cups-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.22-0.rc1.9.32.el4_8.6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client_workstation","package":"cups","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.3.7-18.el5_5.4"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client_workstation","package":"cups-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.3.7-18.el5_5.4"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client_workstation","package":"cups-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.3.7-18.el5_5.4"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"cups","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.3.7-18.el5_5.4"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"cups-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.3.7-18.el5_5.4"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"cups-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.3.7-18.el5_5.4"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"cups-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.3.7-18.el5_5.4"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"cups-lpd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.3.7-18.el5_5.4"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"cups","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.3.7-18.el5_5.4"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"cups-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.3.7-18.el5_5.4"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"cups-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.3.7-18.el5_5.4"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"cups-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.3.7-18.el5_5.4"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"cups-lpd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.3.7-18.el5_5.4"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"cups","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.3-2.3"}]}],"bundled":17}],"products":[{"vendor":"apple","product":"cups"}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2010//Jun/msg00001.html","tags":["vendor-advisory","x_refsource_APPLE","x_transferred","Vendor Advisory","advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2010:234","tags":["vendor-advisory","x_refsource_MANDRIVA","x_transferred","advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/1481","tags":["vdb-entry","x_refsource_VUPEN","x_transferred","Vendor Advisory","advisory"]},{"url":"http://cups.org/articles.php?L596","tags":["x_refsource_CONFIRM","x_transferred","web"]},{"url":"http://www.securityfocus.com/bid/40871","tags":["vdb-entry","x_refsource_BID","x_transferred","Patch","fix"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2010:232","tags":["vendor-advisory","x_refsource_MANDRIVA","x_transferred","advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-12/msg00000.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","web"]},{"url":"http://www.debian.org/security/2011/dsa-2176","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred","advisory"]},{"url":"http://support.apple.com/kb/HT4188","tags":["x_refsource_CONFIRM","x_transferred","Patch","Vendor Advisory","advisory","fix"]},{"url":"http://security.gentoo.org/glsa/glsa-201207-10.xml","tags":["vendor-advisory","x_refsource_GENTOO","x_transferred","advisory"]},{"url":"http://www.vupen.com/english/advisories/2011/0535","tags":["vdb-entry","x_refsource_VUPEN","x_transferred","Vendor Advisory","advisory"]},{"url":"http://secunia.com/advisories/40220","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Vendor Advisory","advisory"]},{"url":"http://cups.org/str.php?L3577","tags":["x_refsource_CONFIRM","x_transferred","web"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9723","tags":["vdb-entry","signature","x_refsource_OVAL","x_transferred","web"]},{"url":"http://secunia.com/advisories/43521","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Vendor Advisory","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2010-1748","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-vcrj-62jj-6wf5"},{"url":"https://security-tracker.debian.org/tracker/CVE-2010-1748","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2010:0490","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=587746","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=588805","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=591983","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2010/rhsa-2010_0490.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2010-0540","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2010-0540","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2010-0540","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2010-0542","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2010-0542","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2010-0542","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2010-1748","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2010-1748","tags":["advisory"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2009-0163","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2009-2820","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2009-3553","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-0393","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-0540","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-0542","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-1748","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-2941","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-5519","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-6094","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-2856","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3537","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-5029","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-5030","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-5031","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-1158","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-1159","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2010-1748","description":"The cgi_initialize_string function in cgi-bin/var.c in the web interface in CUPS before 1.4.4, as used on Apple Mac OS X 10.5.8, Mac OS X 10.6 before 10.6.4, and other platforms, does not properly handle parameter values containing a % (percent) character without two subsequent hex characters, which allows context-dependent attackers to obtain sensitive information from cupsd process memory via a crafted request, as demonstrated by the (1) /admin?OP=redirect\u0026URL=% and (2) /admin?URL=/admin/\u0026OP=% URIs.","status":"published","published":"2010-06-17T16:00:00Z","modified":"2024-08-07T01:35:53.57Z","updated_at":"2026-11-02T14:33:29.227451Z"}],"euvd":[{"id":"EUVD-2010-1768","description":"The cgi_initialize_string function in cgi-bin/var.c in the web interface in CUPS before 1.4.4, as used on Apple Mac OS X 10.5.8, Mac OS X 10.6 before 10.6.4, and other platforms, does not properly handle parameter values containing a % (percent) character without two subsequent hex characters, which allows context-dependent attackers to obtain sensitive information from cupsd process memory via a crafted request, as demonstrated by the (1) /admin?OP=redirect\u0026URL=% and (2) /admin?URL=/admin/\u0026OP=% URIs.","status":"published","published":"2010-06-17T16:00:00Z","modified":"2024-08-07T01:35:53Z","updated_at":"2026-11-03T01:39:40.343238Z"}],"ghsa":[{"id":"GHSA-vcrj-62jj-6wf5","title":"The cgi_initialize_string function in cgi-bin/var.c in the web interface in CUPS before 1.4.4, as...","description":"The cgi_initialize_string function in cgi-bin/var.c in the web interface in CUPS before 1.4.4, as used on Apple Mac OS X 10.5.8, Mac OS X 10.6 before 10.6.4, and other platforms, does not properly handle parameter values containing a % (percent) character without two subsequent hex characters, which allows context-dependent attackers to obtain sensitive information from cupsd process memory via a crafted request, as demonstrated by the (1) /admin?OP=redirect\u0026URL=% and (2) /admin?URL=/admin/\u0026OP=% URIs.","status":"published","published":"2022-05-17T01:05:32Z","modified":"2023-02-03T05:03:13Z","cwes":["CWE-119"],"updated_at":"2026-11-02T14:53:19.085994Z"}],"nvd":[{"id":"CVE-2010-1748","description":"The cgi_initialize_string function in cgi-bin/var.c in the web interface in CUPS before 1.4.4, as used on Apple Mac OS X 10.5.8, Mac OS X 10.6 before 10.6.4, and other platforms, does not properly handle parameter values containing a % (percent) character without two subsequent hex characters, which allows context-dependent attackers to obtain sensitive information from cupsd process memory via a crafted request, as demonstrated by the (1) /admin?OP=redirect\u0026URL=% and (2) /admin?URL=/admin/\u0026OP=% URIs.","status":"published","published":"2010-06-17T16:30:01.92Z","modified":"2026-06-16T23:19:14.377Z","cvss":[{"version":"2.0","score":4.3,"vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-119"],"updated_at":"2026-11-02T14:01:47.724369Z"}],"osv":[{"id":"CVE-2010-1748","description":"The cgi_initialize_string function in cgi-bin/var.c in the web interface in CUPS before 1.4.4, as used on Apple Mac OS X 10.5.8, Mac OS X 10.6 before 10.6.4, and other platforms, does not properly handle parameter values containing a % (percent) character without two subsequent hex characters, which allows context-dependent attackers to obtain sensitive information from cupsd process memory via a crafted request, as demonstrated by the (1) /admin?OP=redirect\u0026URL=% and (2) /admin?URL=/admin/\u0026OP=% URIs.","status":"published","published":"2010-06-17T16:30:01Z","modified":"2026-04-10T03:41:14.47269Z","updated_at":"2026-11-02T15:43:57.714116Z"},{"id":"DEBIAN-CVE-2010-1748","description":"The cgi_initialize_string function in cgi-bin/var.c in the web interface in CUPS before 1.4.4, as used on Apple Mac OS X 10.5.8, Mac OS X 10.6 before 10.6.4, and other platforms, does not properly handle parameter values containing a % (percent) character without two subsequent hex characters, which allows context-dependent attackers to obtain sensitive information from cupsd process memory via a crafted request, as demonstrated by the (1) /admin?OP=redirect\u0026URL=% and (2) /admin?URL=/admin/\u0026OP=% URIs.","status":"published","published":"2010-06-17T16:30:01.92Z","modified":"2026-10-23T17:47:30.955533878Z","updated_at":"2026-11-02T15:45:24.316685Z"},{"id":"DSA-2176-1","title":"cups - several","status":"published","published":"2011-03-02T00:00:00Z","modified":"2026-03-09T01:19:21.160092Z","updated_at":"2026-11-02T15:46:15.108335Z"},{"id":"openSUSE-SU-2024:10075-1","title":"cups-2.1.3-2.3 on GA media","description":"These are all security issues fixed in the cups-2.1.3-2.3 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T03:17:46.163647Z","updated_at":"2026-11-02T16:58:33.135986Z"},{"id":"RHSA-2010:0490","title":"Red Hat Security Advisory: cups security update","status":"published","published":"2024-09-15T18:25:49Z","modified":"2026-06-26T12:20:35.852859526Z","updated_at":"2026-11-02T15:53:00.468834Z"}]}}