Lucene search

K
cve[email protected]CVE-2014-2707
HistoryApr 17, 2014 - 2:55 p.m.

CVE-2014-2707

2014-04-1714:55:11
CWE-78
web.nvd.nist.gov
32
cve-2014-2707
cups-browsed
cups-filters
remote execution
arbitrary commands
ipp printers
shell metacharacters

8.3 High

CVSS2

Attack Vector

ADJACENT_NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:A/AC:L/Au:N/C:C/I:C/A:C

7.3 High

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

54.5%

cups-browsed in cups-filters 1.0.41 before 1.0.51 allows remote IPP printers to execute arbitrary commands via shell metacharacters in the (1) model or (2) PDL, related to โ€œSystem V interface scripts generated for queues.โ€

Affected configurations

NVD
Node
linuxfoundationcups-filtersMatch1.0.41
OR
linuxfoundationcups-filtersMatch1.0.42
OR
linuxfoundationcups-filtersMatch1.0.43
OR
linuxfoundationcups-filtersMatch1.0.44
OR
linuxfoundationcups-filtersMatch1.0.45
OR
linuxfoundationcups-filtersMatch1.0.46
OR
linuxfoundationcups-filtersMatch1.0.47
OR
linuxfoundationcups-filtersMatch1.0.48
OR
linuxfoundationcups-filtersMatch1.0.49
OR
linuxfoundationcups-filtersMatch1.0.50

8.3 High

CVSS2

Attack Vector

ADJACENT_NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:A/AC:L/Au:N/C:C/I:C/A:C

7.3 High

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

54.5%