Lucene search
Ubuntu.comUB:CVE-2012-4510HistoryNov 20, 2012 - 12:00 a.m.
CVE-2012-4510
2012-11-2000:00:00
ubuntu.com
ubuntu.com
4
5.8 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:P/I:P/A:N
0.003 Low
EPSS
Percentile
65.9%
cups-pk-helper before 0.2.3 does not properly wrap the (1) cupsGetFile and
(2) cupsPutFile function calls, which allows user-assisted remote attackers
to read or overwrite sensitive files using CUPS resources.
Bugs
Notes
| Author | Note |
|---|---|
| seth-arnold | mitigated slightly by polkit requiring admin password |
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| ubuntu | 11.10 | noarch | cups-pk-helper | < 0.1.2-1ubuntu0.1 | UNKNOWN |
| ubuntu | 12.04 | noarch | cups-pk-helper | < 0.2.1.2-1ubuntu0.1 | UNKNOWN |
| ubuntu | 12.10 | noarch | cups-pk-helper | < 0.2.1.2-1ubuntu1.1 | UNKNOWN |
Related
nessus
nessus
Mandriva Linux Security Advisory : cups-pk-helper (MDVSA-2013:069)
2013-04-20 00:00:00
Debian DSA-2562-1 : cups-pk-helper - privilege escalation
2012-10-24 00:00:00
Fedora 16 : cups-pk-helper-0.1.3-4.fc16 (2012-18927)
2012-12-12 00:00:00
openvas
openvas
Fedora Update for cups-pk-helper FEDORA-2012-18927
2012-12-14 00:00:00
Fedora Update for cups-pk-helper FEDORA-2012-18927
2012-12-14 00:00:00
Fedora Update for cups-pk-helper FEDORA-2012-18950
2012-12-11 00:00:00
fedora
fedora
[SECURITY] Fedora 16 Update: cups-pk-helper-0.1.3-4.fc16
2012-12-11 09:23:33
[SECURITY] Fedora 18 Update: cups-pk-helper-0.2.4-1.fc18
2012-12-11 06:00:09
[SECURITY] Fedora 17 Update: cups-pk-helper-0.2.2-2.fc17
2012-12-11 01:23:44
securityvulns
securityvulns
[SECURITY] [DSA 2562-1] cups-pk-helper security update
2012-10-28 00:00:00
cups-pk-helper privilege escalation
2012-10-28 00:00:00
cve
cve
CVE-2012-4510
2012-11-20 00:55:01
prion
prion
Code injection
2012-11-20 00:55:00
cvelist
cvelist
CVE-2012-4510
2012-11-20 00:00:00
osv
osv
cups-pk-helper - privilege escalation
2012-10-23 00:00:00
debian
debian
[SECURITY] [DSA 2562-1] cups-pk-helper security update
2012-10-23 16:50:37
nvd
nvd
CVE-2012-4510
2012-11-20 00:55:01
debiancve
debiancve
CVE-2012-4510
2012-11-20 00:55:01
5.8 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:P/I:P/A:N
0.003 Low
EPSS
Percentile
65.9%
Related for UB:CVE-2012-4510