Re: Attacking UNIX Systems via CUPS

Read this: https://www.evilsocket.net/2024/09/26/Attacking-UNIX-systems-via-CUPS-Part-I/

Then you should probably go and rip out CUPS. Everywhere. Or at the very least TAKE YOUR SERVERS OFF THE FLAMING INTERNET.

Exploit code is available on the public internet. No I will not post a link.

#cups #evilsocket

So it was "just" #CUPSD #Evilsocket found #RCE in.
Interesting work, but not the shocker announced.

https://www.evilsocket.net/2024/09/26/Attacking-UNIX-systems-via-CUPS-Part-I/

Attention Systems Administrators: A vulnerability (CVE-2024-47176 ...) has been identified in the CUPS package used in various Linux systems. Please refer to the following link for the necessary remediation steps:
https://www.evilsocket.net/2024/09/26/Attacking-UNIX-systems-via-CUPS-Part-I/

Also @redhat has a response on this and how to check if you are affected: https://www.redhat.com/en/blog/red-hat-response-openprinting-cups-vulnerabilities

#evilsocket #vulnerability #Cups #Linux #Printing #Sysadmin #cybersecurity #Opensource

If you are using cups (printer in Linux) and you don't need it. Disable it by running the following commands

Cmds:
systemctl stop cups
systemctl disable cups

#cups #evilsocket

OK, let's go to bed and sleep peacefully.

#evilsocket

simone margaritelli released part one of (possibly) 3 regarding remote code execution (rce) vulnerability through cups.

image attached shows instructions for protecting yourself.

https://www.evilsocket.net/2024/09/26/Attacking-UNIX-systems-via-CUPS-Part-I/

#linux #cybersecurity #security #news #cups #cupsbrowsed #rce #evilsocket