Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-r8jg-q736-v263

Опубликовано: 17 мая 2022
Источник: github
Github: Не прошло ревью

Описание

lppasswd in CUPS before 1.7.1, when running with setuid privileges, allows local users to read portions of arbitrary files via a modified HOME environment variable and a symlink attack involving .cups/client.conf.

lppasswd in CUPS before 1.7.1, when running with setuid privileges, allows local users to read portions of arbitrary files via a modified HOME environment variable and a symlink attack involving .cups/client.conf.

EPSS

Процентиль: 39%
0.00446
Низкий

Дефекты

CWE-59

Связанные уязвимости

ubuntu
почти 13 лет назад

lppasswd in CUPS before 1.7.1, when running with setuid privileges, allows local users to read portions of arbitrary files via a modified HOME environment variable and a symlink attack involving .cups/client.conf.

redhat
почти 13 лет назад

lppasswd in CUPS before 1.7.1, when running with setuid privileges, allows local users to read portions of arbitrary files via a modified HOME environment variable and a symlink attack involving .cups/client.conf.

nvd
почти 13 лет назад

lppasswd in CUPS before 1.7.1, when running with setuid privileges, allows local users to read portions of arbitrary files via a modified HOME environment variable and a symlink attack involving .cups/client.conf.

debian
почти 13 лет назад

lppasswd in CUPS before 1.7.1, when running with setuid privileges, al ...

altlinux
больше 12 лет назад

ALT-PU-2014-1513: package `cups` update to version 1.7.2-alt1

EPSS

Процентиль: 39%
0.00446
Низкий

Дефекты

CWE-59