Lucene search

K
nvd[email protected]NVD:CVE-2014-5030
HistoryJul 29, 2014 - 2:55 p.m.

CVE-2014-5030

2014-07-2914:55:07
CWE-59
web.nvd.nist.gov

1.9 Low

CVSS2

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:M/Au:N/C:P/I:N/A:N

8.1 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

CUPS before 2.0 allows local users to read arbitrary files via a symlink attack on (1) index.html, (2) index.class, (3) index.pl, (4) index.php, (5) index.pyc, or (6) index.py.

Affected configurations

NVD
Node
canonicalubuntu_linuxMatch10.04lts
OR
canonicalubuntu_linuxMatch12.04lts
OR
canonicalubuntu_linuxMatch14.04lts
Node
applecupsRange1.7.4
OR
applecupsMatch1.7rc1
OR
applecupsMatch1.7.0
OR
applecupsMatch1.7.1
OR
applecupsMatch1.7.1b1
OR
applecupsMatch1.7.2
OR
applecupsMatch1.7.3

1.9 Low

CVSS2

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:M/Au:N/C:P/I:N/A:N

8.1 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%