CUPS vulnerability

2014-04-2400:00:00

ubuntu.com

5.6 Medium

AI Score

Confidence

High

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.009 Low

EPSS

Percentile

82.2%

JSON

Releases

Ubuntu 13.10
Ubuntu 12.10
Ubuntu 12.04
Ubuntu 10.04

Packages

cups - Common UNIX Printing System™

Details

Alex Korobkin discovered that the CUPS web interface incorrectly protected
against cross-site scripting (XSS) attacks. If an authenticated user were
tricked into visiting a malicious website while logged into CUPS, a remote
attacker could modify the CUPS configuration and possibly steal
confidential data.

OSVersionArchitecturePackageVersionFilename
Ubuntu13.10noarchcups< 1.7.0~rc1-0ubuntu5.3UNKNOWN
Ubuntu13.10noarchcups-bsd< 1.7.0~rc1-0ubuntu5.3UNKNOWN
Ubuntu13.10noarchcups-client< 1.7.0~rc1-0ubuntu5.3UNKNOWN
Ubuntu13.10noarchcups-daemon< 1.7.0~rc1-0ubuntu5.3UNKNOWN
Ubuntu13.10noarchcups-dbg< 1.7.0~rc1-0ubuntu5.3UNKNOWN
Ubuntu13.10noarchcups-ppdc< 1.7.0~rc1-0ubuntu5.3UNKNOWN
Ubuntu13.10noarchlibcups2< 1.7.0~rc1-0ubuntu5.3UNKNOWN
Ubuntu13.10noarchlibcups2-dev< 1.7.0~rc1-0ubuntu5.3UNKNOWN
Ubuntu13.10noarchlibcupscgi1< 1.7.0~rc1-0ubuntu5.3UNKNOWN
Ubuntu13.10noarchlibcupscgi1-dev< 1.7.0~rc1-0ubuntu5.3UNKNOWN

OS	Version	Architecture	Package	Version	Filename
Ubuntu	13.10	noarch	cups	< 1.7.0~rc1-0ubuntu5.3	UNKNOWN
Ubuntu	13.10	noarch	cups-bsd	< 1.7.0~rc1-0ubuntu5.3	UNKNOWN
Ubuntu	13.10	noarch	cups-client	< 1.7.0~rc1-0ubuntu5.3	UNKNOWN
Ubuntu	13.10	noarch	cups-daemon	< 1.7.0~rc1-0ubuntu5.3	UNKNOWN
Ubuntu	13.10	noarch	cups-dbg	< 1.7.0~rc1-0ubuntu5.3	UNKNOWN
Ubuntu	13.10	noarch	cups-ppdc	< 1.7.0~rc1-0ubuntu5.3	UNKNOWN
Ubuntu	13.10	noarch	libcups2	< 1.7.0~rc1-0ubuntu5.3	UNKNOWN
Ubuntu	13.10	noarch	libcups2-dev	< 1.7.0~rc1-0ubuntu5.3	UNKNOWN
Ubuntu	13.10	noarch	libcupscgi1	< 1.7.0~rc1-0ubuntu5.3	UNKNOWN
Ubuntu	13.10	noarch	libcupscgi1-dev	< 1.7.0~rc1-0ubuntu5.3	UNKNOWN