Lucene search
GoogleOSV:DLA-0022-1HistoryJul 31, 2014 - 12:00 a.m.
cups - security update
2014-07-3100:00:00
Google
osv.dev
5
5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
It was discovered that the web interface in CUPS, the Common UNIX
Printing System, incorrectly validated permissions on rss files and
directory index files. A local attacker could possibly use this issue
to bypass file permissions and read arbitrary files, possibly leading
to a privilege escalation.
For Debian 6 Squeeze, these issues have been fixed in cups version 1.4.4-7+squeeze6
| CPE | Name | Operator | Version |
|---|---|---|---|
| cups | eq | 1.4.4-7+squeeze5 | |
| cups | eq | 1.4.4-7+squeeze4 | |
| cups | eq | 1.4.4-7 | |
| cups | eq | 1.4.4-7+squeeze3 | |
| cups | eq | 1.4.4-7+squeeze2 | |
| cups | eq | 1.4.4-7+squeeze1 |
Related
fedora
fedora
[SECURITY] Fedora 20 Update: cups-1.7.4-3.fc20
2014-07-30 21:57:02
[SECURITY] Fedora 19 Update: cups-1.6.4-10.fc19
2014-10-03 03:57:17
[SECURITY] Fedora 20 Update: cups-1.7.5-12.fc20
2015-02-20 08:33:22
securityvulns
securityvulns
CUPS unauthorized files access
2014-07-28 00:00:00
[SECURITY] [DSA 2990-1] cups security update
2014-07-28 00:00:00
[USN-2293-1] CUPS vulnerability
2014-07-22 00:00:00
debian
debian
[SECURITY] [DSA 2990-1] cups security update
2014-07-27 14:18:27
[DLA-0022-1] cups security update
2014-07-31 07:57:21
[SECURITY] [DSA 2990-1] cups security update
2014-07-27 14:18:46
nessus
nessus
SuSE 11.3 Security Update : CUPS (SAT Patch Number 9561)
2014-08-15 00:00:00
Debian DLA-22-1 : cups security update
2015-03-26 00:00:00
CUPS 1.7.x < 1.7.5 'get_file' Function Symlink Handling Info Disclosure
2014-08-12 00:00:00
openvas
openvas
Debian: Security Advisory (DSA-2990-1)
2014-07-26 00:00:00
Debian Security Advisory DSA 2990-1 (cups - security update)
2014-07-27 00:00:00
SUSE: Security Advisory (SUSE-SU-2014:1022-1)
2021-06-09 00:00:00
mageia
mageia
Updated cups packages fix security vulnerability
2014-08-06 00:08:48
redhat
redhat
(RHSA-2014:1388) Moderate: cups security and bug fix update
2014-10-14 00:00:00
centos
centos
cups security update
2014-10-20 18:08:35
oraclelinux
oraclelinux
cups security and bug fix update
2014-10-15 00:00:00
amazon
amazon
Medium: cups
2014-10-28 17:17:00
ubuntu
ubuntu
CUPS vulnerabilities
2014-09-08 00:00:00
CUPS vulnerability
2014-07-21 00:00:00
debiancve
debiancve
cve
cve
prion
prion
Code injection
2014-07-29 14:55:00
Design/Logic Flaw
2014-07-23 14:55:00
Code injection
2014-07-29 14:55:00
veracode
veracode
Information Disclosure
2019-05-02 05:12:22
Information Disclosure
2019-05-02 05:12:22
Information Disclosure
2019-05-02 05:12:22
ubuntucve
ubuntucve
5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
Related for OSV:DLA-0022-1