Mandrake Security Advisory MDVSA-2009:027 (cups)

The remote host is missing an update to cups announced via advisory MDVSA-2009:027. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR...

[ MDVSA-2009:027 ] cups

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2009:027 http://www.mandriva.com/security/ Package : cups Date : January 24, 2009 Affected: 2009.0 Problem Description: A vulnerability has been discovered in CUPS shipped with Mandriva Linux which allows local...

CVE-2009-0032

CVE-2009-0032 affects CUPS shipped with Mandriva Linux (2008.0, 2008.1, 2009.0) and Mandriva CS/MNF; a local symlink attack on the /tmp/pdf.log file lets local users overwrite arbitrary files. Root cause: insecure handling of temporary file creation via symlinks in CUPS. Impact: local privilege/e...