The CUPS service on multiple platforms allows remote attackers to cause a denial of service (service hang) via a \partially-negotiated\ SSL connection which prevents other requests from being accepted.