CVE-2002-1369
Status: ModifiedHigh (10)—
jobs.c in Common Unix Printing System (CUPS) 1.1.14 through 1.1.17 does not properly use the strncat function call when processing the options string, which allows remote attackers to execute arbitrary code via a buffer overflow attack.
CVSS
- Version: 2.0
- Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
- Base score: 10
Exploitation probability (EPSS)
- Probability of exploitation in the next 30 days: 8.20%
- Percentile among all scored CVEs: 95
- Score date: 10/5/2026
EPSS (Exploit Prediction Scoring System, FIRST) estimates how likely a vulnerability is to be exploited in the wild within 30 days. It complements CVSS (impact) and CISA KEV (confirmed exploitation).
Affected technologies (2)
CWEs
- NVD-CWE-Other
References
- http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0117.html
- http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000702
- http://marc.info/?l=bugtraq&m=104032149026670&w=2
- http://www.debian.org/security/2003/dsa-232
- http://www.idefense.com/advisory/12.19.02.txt
- http://www.mandrakesoft.com/security/advisories?name=MDKSA-2003:001
- http://www.novell.com/linux/security/advisories/2003_002_cups.html
- http://www.redhat.com/support/errata/RHSA-2002-295.html
- http://www.securityfocus.com/bid/6438
- https://exchange.xforce.ibmcloud.com/vulnerabilities/10910
- http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0117.html
- http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000702
- http://marc.info/?l=bugtraq&m=104032149026670&w=2
- http://www.debian.org/security/2003/dsa-232
- http://www.idefense.com/advisory/12.19.02.txt
- http://www.mandrakesoft.com/security/advisories?name=MDKSA-2003:001
- http://www.novell.com/linux/security/advisories/2003_002_cups.html
- http://www.redhat.com/support/errata/RHSA-2002-295.html
- http://www.securityfocus.com/bid/6438
- https://exchange.xforce.ibmcloud.com/vulnerabilities/10910
Raw JSON (NVD)
Show
{
"id": "CVE-2002-1369",
"cveTags": [],
"metrics": {
"cvssMetricV2": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"version": "2.0",
"baseScore": 10,
"accessVector": "NETWORK",
"vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
"authentication": "NONE",
"integrityImpact": "COMPLETE",
"accessComplexity": "LOW",
"availabilityImpact": "COMPLETE",
"confidentialityImpact": "COMPLETE"
},
"acInsufInfo": false,
"impactScore": 10,
"baseSeverity": "HIGH",
"obtainAllPrivilege": true,
"exploitabilityScore": 10,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": false
}
]
},
"affected": [
{
"source": "cve@mitre.org",
"affectedData": [
{
"vendor": "n/a",
"product": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
]
}
],
"published": "2002-12-26T05:00:00.000",
"references": [
{
"url": "http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0117.html",
"source": "cve@mitre.org"
},
{
"url": "http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000702",
"source": "cve@mitre.org"
},
{
"url": "http://marc.info/?l=bugtraq&m=104032149026670&w=2",
"source": "cve@mitre.org"
},
{
"url": "http://www.debian.org/security/2003/dsa-232",
"source": "cve@mitre.org"
},
{
"url": "http://www.idefense.com/advisory/12.19.02.txt",
"tags": [
"Exploit",
"Vendor Advisory"
],
"source": "cve@mitre.org"
},
{
"url": "http://www.mandrakesoft.com/security/advisories?name=MDKSA-2003:001",
"source": "cve@mitre.org"
},
{
"url": "http://www.novell.com/linux/security/advisories/2003_002_cups.html",
"source": "cve@mitre.org"
},
{
"url": "http://www.redhat.com/support/errata/RHSA-2002-295.html",
"source": "cve@mitre.org"
},
{
"url": "http://www.securityfocus.com/bid/6438",
"source": "cve@mitre.org"
},
{
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/10910",
"source": "cve@mitre.org"
},
{
"url": "http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0117.html",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000702",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://marc.info/?l=bugtraq&m=104032149026670&w=2",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.debian.org/security/2003/dsa-232",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.idefense.com/advisory/12.19.02.txt",
"tags": [
"Exploit",
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.mandrakesoft.com/security/advisories?name=MDKSA-2003:001",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.novell.com/linux/security/advisories/2003_002_cups.html",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.redhat.com/support/errata/RHSA-2002-295.html",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.securityfocus.com/bid/6438",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/10910",
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
],
"vulnStatus": "Modified",
"weaknesses": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"description": [
{
"lang": "en",
"value": "NVD-CWE-Other"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "jobs.c in Common Unix Printing System (CUPS) 1.1.14 through 1.1.17 does not properly use the strncat function call when processing the options string, which allows remote attackers to execute arbitrary code via a buffer overflow attack."
},
{
"lang": "es",
"value": "jobs.c en Common Unix Printing System (CUPS) 1.1.14 a 1.1.17 no utiliza adecuadamente la llamada a la función strncat cuando procesa la opción string, lo que permite a atacantes remotos la ejecución arbitraria de código mediante un ataque de desbordamiento de búfer."
}
],
"lastModified": "2026-06-16T21:59:11.630",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:easy_software_products:cups:1.0.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "68BD578F-CCAD-4515-9205-EB4F297C6DB4"
},
{
"criteria": "cpe:2.3:a:easy_software_products:cups:1.0.4_8:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F3182CA2-7375-43BC-A0E5-DE11D4B65EE3"
},
{
"criteria": "cpe:2.3:a:easy_software_products:cups:1.1.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "FCF4C8D0-3030-4DD5-800B-76A582A4CD0C"
},
{
"criteria": "cpe:2.3:a:easy_software_products:cups:1.1.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "734D0C2C-F71F-461A-87EE-202C6B706753"
},
{
"criteria": "cpe:2.3:a:easy_software_products:cups:1.1.4_2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3F0F402D-5CD0-4477-8B59-C753CECB02BD"
},
{
"criteria": "cpe:2.3:a:easy_software_products:cups:1.1.4_3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "959F7AFA-ED20-434C-993F-06C2A8574662"
},
{
"criteria": "cpe:2.3:a:easy_software_products:cups:1.1.4_5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D4F5A0A4-2884-46CA-A846-8B954EB80CFA"
},
{
"criteria": "cpe:2.3:a:easy_software_products:cups:1.1.6:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1741CC9D-C4A8-48F9-86CF-EC20AE2A6BE7"
},
{
"criteria": "cpe:2.3:a:easy_software_products:cups:1.1.7:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "35E65857-12C7-49DE-AD27-3CACD456231C"
},
{
"criteria": "cpe:2.3:a:easy_software_products:cups:1.1.10:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "47CEF035-57A6-470B-916A-E5562C28E866"
},
{
"criteria": "cpe:2.3:a:easy_software_products:cups:1.1.13:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D414984E-4F6B-4278-8346-968587E4B18E"
},
{
"criteria": "cpe:2.3:a:easy_software_products:cups:1.1.14:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "33C36DCB-2FDD-44E6-85E8-875575AAE69E"
},
{
"criteria": "cpe:2.3:a:easy_software_products:cups:1.1.17:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A5428EE6-F90A-4BB6-9D8C-8B99E80AB6DF"
}
],
"operator": "OR"
}
]
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:apple:mac_os_x:10.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "CDCF4FB3-F781-46D5-BEE7-485B3DC78B83"
},
{
"criteria": "cpe:2.3:o:apple:mac_os_x:10.2.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "56CC0444-570C-4BB5-B53A-C5CA0BD87935"
}
],
"operator": "OR"
}
]
}
],
"sourceIdentifier": "cve@mitre.org"
}