CVEvulnerability

CVE-2013-6891

1.2 LOW Published 2014-01-26 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2014-01-26
Last modified
2026-06-17
Assigner
[email protected]
CVSS 2.0 ([email protected])
1.2 LOW — AV:L/AC:H/Au:N/C:P/I:N/A:N
Weaknesses
CWE-59

Description

lppasswd in CUPS before 1.7.1, when running with setuid privileges, allows local users to read portions of arbitrary files via a modified HOME environment variable and a symlink attack involving .cups/client.conf.

Affected configurations

• apple cups (<= 1.7.0) • apple cups 1.7 • apple cups 1.7.1 • canonical ubuntu linux 12.10 • canonical ubuntu linux 13.04 • canonical ubuntu linux 13.10

Related

Weakness · CWE (1)

  • CWE-59 Improper Link Resolution Before File Access weakness

References