CUPS vulnerability

2014-01-1500:00:00

ubuntu.com

5.4 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.2%

JSON

Releases

Ubuntu 13.10
Ubuntu 13.04
Ubuntu 12.10

Packages

cups - Common UNIX Printing System™

Details

Jann Horn discovered that the CUPS lppasswd tool incorrectly read a user
configuration file in certain configurations. A local attacker could use
this to read sensitive information from certain files, bypassing access
restrictions.

OSVersionArchitecturePackageVersionFilename
Ubuntu13.10noarchcups-client< 1.7.0~rc1-0ubuntu5.2UNKNOWN
Ubuntu13.10noarchcups< 1.7.0~rc1-0ubuntu5.2UNKNOWN
Ubuntu13.10noarchcups-bsd< 1.7.0~rc1-0ubuntu5.2UNKNOWN
Ubuntu13.10noarchcups-daemon< 1.7.0~rc1-0ubuntu5.2UNKNOWN
Ubuntu13.10noarchcups-dbg< 1.7.0~rc1-0ubuntu5.2UNKNOWN
Ubuntu13.10noarchcups-ppdc< 1.7.0~rc1-0ubuntu5.2UNKNOWN
Ubuntu13.10noarchlibcups2< 1.7.0~rc1-0ubuntu5.2UNKNOWN
Ubuntu13.10noarchlibcups2-dev< 1.7.0~rc1-0ubuntu5.2UNKNOWN
Ubuntu13.10noarchlibcupscgi1< 1.7.0~rc1-0ubuntu5.2UNKNOWN
Ubuntu13.10noarchlibcupscgi1-dev< 1.7.0~rc1-0ubuntu5.2UNKNOWN

OS	Version	Architecture	Package	Version	Filename
Ubuntu	13.10	noarch	cups-client	< 1.7.0~rc1-0ubuntu5.2	UNKNOWN
Ubuntu	13.10	noarch	cups	< 1.7.0~rc1-0ubuntu5.2	UNKNOWN
Ubuntu	13.10	noarch	cups-bsd	< 1.7.0~rc1-0ubuntu5.2	UNKNOWN
Ubuntu	13.10	noarch	cups-daemon	< 1.7.0~rc1-0ubuntu5.2	UNKNOWN
Ubuntu	13.10	noarch	cups-dbg	< 1.7.0~rc1-0ubuntu5.2	UNKNOWN
Ubuntu	13.10	noarch	cups-ppdc	< 1.7.0~rc1-0ubuntu5.2	UNKNOWN
Ubuntu	13.10	noarch	libcups2	< 1.7.0~rc1-0ubuntu5.2	UNKNOWN
Ubuntu	13.10	noarch	libcups2-dev	< 1.7.0~rc1-0ubuntu5.2	UNKNOWN
Ubuntu	13.10	noarch	libcupscgi1	< 1.7.0~rc1-0ubuntu5.2	UNKNOWN
Ubuntu	13.10	noarch	libcupscgi1-dev	< 1.7.0~rc1-0ubuntu5.2	UNKNOWN