CVE-2010-0540

Cross-site request forgery (CSRF) vulnerability in the web interface in CUPS before 1.4.4, as used on Apple Mac OS X 10.5.8, Mac OS X 10.6 before 10.6.4, and other platforms, allows remote attackers to hijack the authentication of administrators for requests that change settings.

• CWE-352

• http://cups.org/articles.php?L596
• http://cups.org/str.php?L3498
• http://lists.apple.com/archives/security-announce/2010//Jun/msg00001.htmlVendor Advisory
• http://secunia.com/advisories/40220Vendor Advisory
• http://secunia.com/advisories/43521
• http://security.gentoo.org/glsa/glsa-201207-10.xml
• http://support.apple.com/kb/HT4188Patch, Vendor Advisory
• http://www.debian.org/security/2011/dsa-2176
• http://www.mandriva.com/security/advisories?name=MDVSA-2010:232
• http://www.mandriva.com/security/advisories?name=MDVSA-2010:233
• http://www.mandriva.com/security/advisories?name=MDVSA-2010:234
• http://www.securityfocus.com/bid/40871Patch
• http://www.securitytracker.com/id?1024122
• http://www.vupen.com/english/advisories/2010/1481Patch, Vendor Advisory
• http://www.vupen.com/english/advisories/2011/0535
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10382
• http://cups.org/articles.php?L596
• http://cups.org/str.php?L3498
• http://lists.apple.com/archives/security-announce/2010//Jun/msg00001.htmlVendor Advisory
• http://secunia.com/advisories/40220Vendor Advisory
• http://secunia.com/advisories/43521
• http://security.gentoo.org/glsa/glsa-201207-10.xml
• http://support.apple.com/kb/HT4188Patch, Vendor Advisory
• http://www.debian.org/security/2011/dsa-2176
• http://www.mandriva.com/security/advisories?name=MDVSA-2010:232
• http://www.mandriva.com/security/advisories?name=MDVSA-2010:233
• http://www.mandriva.com/security/advisories?name=MDVSA-2010:234
• http://www.securityfocus.com/bid/40871Patch
• http://www.securitytracker.com/id?1024122
• http://www.vupen.com/english/advisories/2010/1481Patch, Vendor Advisory
• http://www.vupen.com/english/advisories/2011/0535
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10382

Published

Jun 17, 2010

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2010-0534Wiki Server in Apple Mac OS X 10.6 before 10.6.3 does not en…
• CVE-2010-0535Dovecot in Apple Mac OS X 10.6 before 10.6.3, when Kerberos …
• CVE-2010-0536Apple QuickTime before 7.6.6 on Windows allows remote attack…
• CVE-2010-0537DesktopServices in Apple Mac OS X 10.6 before 10.6.3 does no…
• CVE-2010-0538Apple Java for Mac OS X 10.5 before Update 7 and Java for Ma…
• CVE-2010-0539Integer signedness error in the window drawing implementatio…
• CVE-2010-0541Cross-site scripting (XSS) vulnerability in the WEBrick HTTP…
• CVE-2010-0542The _WriteProlog function in texttops.c in texttops in the T…
• CVE-2010-0543ImageIO in Apple Mac OS X 10.5.8, and 10.6 before 10.6.2, al…
• CVE-2010-0544Cross-site scripting (XSS) vulnerability in WebKit in Apple …
• CVE-2010-0545The Finder in DesktopServices in Apple Mac OS X 10.5.8, and …
• CVE-2010-0546Folder Manager in Apple Mac OS X 10.5.8, and 10.6 before 10.…