Lucene search

K
nvd[email protected]NVD:CVE-2014-2707
HistoryApr 17, 2014 - 2:55 p.m.

CVE-2014-2707

2014-04-1714:55:11
CWE-78
web.nvd.nist.gov
7

CVSS2

8.3

Attack Vector

ADJACENT_NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:A/AC:L/Au:N/C:C/I:C/A:C

AI Score

7.3

Confidence

Low

EPSS

0.002

Percentile

54.5%

cups-browsed in cups-filters 1.0.41 before 1.0.51 allows remote IPP printers to execute arbitrary commands via shell metacharacters in the (1) model or (2) PDL, related to โ€œSystem V interface scripts generated for queues.โ€

Affected configurations

Nvd
Node
linuxfoundationcups-filtersMatch1.0.41
OR
linuxfoundationcups-filtersMatch1.0.42
OR
linuxfoundationcups-filtersMatch1.0.43
OR
linuxfoundationcups-filtersMatch1.0.44
OR
linuxfoundationcups-filtersMatch1.0.45
OR
linuxfoundationcups-filtersMatch1.0.46
OR
linuxfoundationcups-filtersMatch1.0.47
OR
linuxfoundationcups-filtersMatch1.0.48
OR
linuxfoundationcups-filtersMatch1.0.49
OR
linuxfoundationcups-filtersMatch1.0.50
VendorProductVersionCPE
linuxfoundationcups-filters1.0.41cpe:2.3:a:linuxfoundation:cups-filters:1.0.41:*:*:*:*:*:*:*
linuxfoundationcups-filters1.0.42cpe:2.3:a:linuxfoundation:cups-filters:1.0.42:*:*:*:*:*:*:*
linuxfoundationcups-filters1.0.43cpe:2.3:a:linuxfoundation:cups-filters:1.0.43:*:*:*:*:*:*:*
linuxfoundationcups-filters1.0.44cpe:2.3:a:linuxfoundation:cups-filters:1.0.44:*:*:*:*:*:*:*
linuxfoundationcups-filters1.0.45cpe:2.3:a:linuxfoundation:cups-filters:1.0.45:*:*:*:*:*:*:*
linuxfoundationcups-filters1.0.46cpe:2.3:a:linuxfoundation:cups-filters:1.0.46:*:*:*:*:*:*:*
linuxfoundationcups-filters1.0.47cpe:2.3:a:linuxfoundation:cups-filters:1.0.47:*:*:*:*:*:*:*
linuxfoundationcups-filters1.0.48cpe:2.3:a:linuxfoundation:cups-filters:1.0.48:*:*:*:*:*:*:*
linuxfoundationcups-filters1.0.49cpe:2.3:a:linuxfoundation:cups-filters:1.0.49:*:*:*:*:*:*:*
linuxfoundationcups-filters1.0.50cpe:2.3:a:linuxfoundation:cups-filters:1.0.50:*:*:*:*:*:*:*

CVSS2

8.3

Attack Vector

ADJACENT_NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:A/AC:L/Au:N/C:C/I:C/A:C

AI Score

7.3

Confidence

Low

EPSS

0.002

Percentile

54.5%