CUPS vulnerability

2012-12-0500:00:00

ubuntu.com

CVSS2

7.2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

AI Score

6.4

Confidence

Low

EPSS

0.001

Percentile

47.5%

JSON

Releases

Ubuntu 12.10
Ubuntu 12.04
Ubuntu 11.10
Ubuntu 10.04
Ubuntu 8.04

Packages

cups - Common UNIX Printing System™
cupsys - Common UNIX Printing System™

Details

It was discovered that users in the lpadmin group could modify certain CUPS
configuration options to escalate privileges. An attacker could use this to
potentially gain root privileges.

OSVersionArchitecturePackageVersionFilename
Ubuntu8.04noarchcupsys< 1.3.7-1ubuntu3.16UNKNOWN
Ubuntu8.04noarchcupsys-bsd< 1.3.7-1ubuntu3.16UNKNOWN
Ubuntu8.04noarchcupsys-client< 1.3.7-1ubuntu3.16UNKNOWN
Ubuntu8.04noarchlibcupsimage2< 1.3.7-1ubuntu3.16UNKNOWN
Ubuntu8.04noarchlibcupsimage2-dev< 1.3.7-1ubuntu3.16UNKNOWN
Ubuntu8.04noarchlibcupsys2< 1.3.7-1ubuntu3.16UNKNOWN
Ubuntu8.04noarchlibcupsys2-dev< 1.3.7-1ubuntu3.16UNKNOWN
Ubuntu12.10noarchcups< 1.6.1-0ubuntu11.3UNKNOWN
Ubuntu12.10noarchcups-bsd< 1.6.1-0ubuntu11.3UNKNOWN
Ubuntu12.10noarchcups-client< 1.6.1-0ubuntu11.3UNKNOWN

OS	Version	Architecture	Package	Version	Filename
Ubuntu	8.04	noarch	cupsys	< 1.3.7-1ubuntu3.16	UNKNOWN
Ubuntu	8.04	noarch	cupsys-bsd	< 1.3.7-1ubuntu3.16	UNKNOWN
Ubuntu	8.04	noarch	cupsys-client	< 1.3.7-1ubuntu3.16	UNKNOWN
Ubuntu	8.04	noarch	libcupsimage2	< 1.3.7-1ubuntu3.16	UNKNOWN
Ubuntu	8.04	noarch	libcupsimage2-dev	< 1.3.7-1ubuntu3.16	UNKNOWN
Ubuntu	8.04	noarch	libcupsys2	< 1.3.7-1ubuntu3.16	UNKNOWN
Ubuntu	8.04	noarch	libcupsys2-dev	< 1.3.7-1ubuntu3.16	UNKNOWN
Ubuntu	12.10	noarch	cups	< 1.6.1-0ubuntu11.3	UNKNOWN
Ubuntu	12.10	noarch	cups-bsd	< 1.6.1-0ubuntu11.3	UNKNOWN
Ubuntu	12.10	noarch	cups-client	< 1.6.1-0ubuntu11.3	UNKNOWN