| CUPS is a standards-based, open-source printing system, and cups-browsed contains network printing functionality including, but not limited to, auto-discovering print services and shared printers. cups-browsed binds to INADDR_ANY:631, causing it to trust any packet from any source, and can cause the "Get-Printer-Attributes" IPP request to an attacker controlled URL. This signature indicates the incoming "Connect Back" requests from outside of the network, which could be the part of DOS attempt. |
