CVEvulnerability

CVE-2014-3537

1.2 LOW Published 2014-07-23 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2014-07-23
Last modified
2026-06-17
Assigner
[email protected]
CVSS 2.0 ([email protected])
1.2 LOW — AV:L/AC:H/Au:N/C:P/I:N/A:N
Weaknesses
CWE-59

Description

The web interface in CUPS before 1.7.4 allows local users in the lp group to read arbitrary files via a symlink attack on a file in /var/cache/cups/rss/.

Affected configurations

• apple cups (<= 1.7.3) • apple cups 1.7 • apple cups 1.7.0 • apple cups 1.7.1 • apple cups 1.7.2 • canonical ubuntu linux 10.04 • canonical ubuntu linux 12.04 • canonical ubuntu linux 14.04 • fedoraproject fedora 20

Related

Weakness · CWE (1)

  • CWE-59 Improper Link Resolution Before File Access weakness

References