Lucene search
UbuntuUSN-2293-1HistoryJul 21, 2014 - 12:00 a.m.
CUPS vulnerability
2014-07-2100:00:00
ubuntu.com
46
CVSS2
1.2
Attack Vector
LOCAL
Attack Complexity
HIGH
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:L/AC:H/Au:N/C:P/I:N/A:N
AI Score
8.2
Confidence
High
EPSS
0.001
Percentile
26.5%
Releases
- Ubuntu 14.04 ESM
- Ubuntu 12.04
- Ubuntu 10.04
Packages
- cups - Common UNIX Printing System™
Details
Francisco Alonso discovered that the CUPS web interface incorrectly
validated permissions on rss files. A local attacker could possibly use
this issue to bypass file permissions and read arbitrary files, possibly
leading to a privilege escalation.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Ubuntu | 14.04 | noarch | cups | < 1.7.2-0ubuntu1.1 | UNKNOWN |
| Ubuntu | 14.04 | noarch | cups-bsd | < 1.7.2-0ubuntu1.1 | UNKNOWN |
| Ubuntu | 14.04 | noarch | cups-client | < 1.7.2-0ubuntu1.1 | UNKNOWN |
| Ubuntu | 14.04 | noarch | cups-core-drivers | < 1.7.2-0ubuntu1.1 | UNKNOWN |
| Ubuntu | 14.04 | noarch | cups-daemon | < 1.7.2-0ubuntu1.1 | UNKNOWN |
| Ubuntu | 14.04 | noarch | cups-dbg | < 1.7.2-0ubuntu1.1 | UNKNOWN |
| Ubuntu | 14.04 | noarch | cups-ppdc | < 1.7.2-0ubuntu1.1 | UNKNOWN |
| Ubuntu | 14.04 | noarch | libcups2 | < 1.7.2-0ubuntu1.1 | UNKNOWN |
| Ubuntu | 14.04 | noarch | libcups2-dev | < 1.7.2-0ubuntu1.1 | UNKNOWN |
| Ubuntu | 14.04 | noarch | libcupscgi1 | < 1.7.2-0ubuntu1.1 | UNKNOWN |
References
Related
prion
prion
Design/Logic Flaw
2014-07-23 14:55:00
Code injection
2014-07-29 14:55:00
nvd
nvd
CVE-2014-3537
2014-07-23 14:55:05
CVE-2014-5029
2014-07-29 14:55:07
openvas
openvas
Fedora Update for cups FEDORA-2014-8351
2014-07-21 00:00:00
Ubuntu: Security Advisory (USN-2293-1)
2014-07-28 00:00:00
Debian: Security Advisory (DSA-2990-1)
2014-07-26 00:00:00
cvelist
cvelist
CVE-2014-3537
2014-07-23 14:00:00
CVE-2014-5029
2014-07-29 14:00:00
nessus
nessus
CUPS 1.7.x < 1.7.4 'get_file' Function Symlink Handling Info Disclosure
2014-07-31 00:00:00
Fedora 20 : cups-1.7.4-1.fc20 (2014-8351)
2014-07-21 00:00:00
Ubuntu 14.04 LTS : CUPS vulnerability (USN-2293-1)
2014-07-22 00:00:00
debiancve
debiancve
CVE-2014-3537
2014-07-23 14:55:05
CVE-2014-5029
2014-07-29 14:55:07
securityvulns
securityvulns
[USN-2293-1] CUPS vulnerability
2014-07-22 00:00:00
CUPS unauthorized files access
2014-07-28 00:00:00
[SECURITY] [DSA 2990-1] cups security update
2014-07-28 00:00:00
cve
cve
CVE-2014-3537
2014-07-23 14:55:05
CVE-2014-5029
2014-07-29 14:55:07
veracode
veracode
Information Disclosure
2019-05-02 05:12:22
Information Disclosure
2019-05-02 05:12:22
ubuntucve
ubuntucve
CVE-2014-3537
2014-07-17 00:00:00
CVE-2014-5029
2014-07-29 00:00:00
fedora
fedora
[SECURITY] Fedora 20 Update: cups-1.7.4-1.fc20
2014-07-19 06:00:32
[SECURITY] Fedora 20 Update: cups-1.7.4-3.fc20
2014-07-30 21:57:02
[SECURITY] Fedora 19 Update: cups-1.6.4-10.fc19
2014-10-03 03:57:17
debian
debian
[SECURITY] [DSA 2990-1] cups security update
2014-07-27 14:18:27
[SECURITY] [DSA 2990-1] cups security update
2014-07-27 14:18:27
[DLA-0022-1] cups security update
2014-07-31 07:47:54
osv
osv
cups - security update
2014-07-31 00:00:00
cups-2.1.3-2.3 on GA media
2024-06-15 00:00:00
mageia
mageia
Updated cups packages fix security vulnerability
2014-08-06 00:08:48
amazon
amazon
Medium: cups
2014-10-28 17:17:00
oraclelinux
oraclelinux
cups security and bug fix update
2014-10-15 00:00:00
redhat
redhat
(RHSA-2014:1388) Moderate: cups security and bug fix update
2014-10-14 00:00:00
centos
centos
cups security update
2014-10-20 18:08:35
CVSS2
1.2
Attack Vector
LOCAL
Attack Complexity
HIGH
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:L/AC:H/Au:N/C:P/I:N/A:N
AI Score
8.2
Confidence
High
EPSS
0.001
Percentile
26.5%
Related for USN-2293-1