CVE-2007-0720

Publication date 13 March 2007

Last updated 24 July 2024

Ubuntu priority

Unknown

Why this priority?

The CUPS service on multiple platforms allows remote attackers to cause a denial of service (service hang) via a “partially-negotiated” SSL connection, which prevents other requests from being accepted.

Read the notes from the security team

Status

No maintained releases are affected by this CVE.

Package Ubuntu Release Status
cupsys 7.04 feisty
Not affected
6.10 edgy Ignored
6.06 LTS dapper Ignored

Notes

kees

The “fix” isn’t really a fix, and just worsens the diagnostics available to an admin seeking the DoS. This is a design problem with CUPS.