Arbitrary File Write

2019-01-1508:58:43

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

7.2 High

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

JSON

cups is vulnerable to arbitrary file write attacks. The vulnerability exists as CUPS 1.4.4, when running in certain Linux distributions such as Debian GNU/Linux, stores the web interface administrator key in /var/run/cups/certs/0 using certain permissions, which allows local users in the lpadmin group to read or write arbitrary files as root by leveraging the web interface.

CPENameOperatorVersion
cupseq1.3.7__8.el5
cupseq1.2.4__11.14.el5_1.3
cupseq1.3.7__26.el5
cupseq1.3.7__11.el5_4.3
cupseq1.2.4__11.5.3.el5
cupseq1.2.4__11.5.el5
cupseq1.4.2__39.el6
cupseq1.3.7__11.el5_4.6
cupseq1.4.2__35.el6
cupseq1.3.7__18.el5_5.7

Name	Operator	Version
cups	eq	1.3.7__8.el5
cups	eq	1.2.4__11.14.el5_1.3
cups	eq	1.3.7__26.el5
cups	eq	1.3.7__11.el5_4.3
cups	eq	1.2.4__11.5.3.el5
cups	eq	1.2.4__11.5.el5
cups	eq	1.4.2__39.el6
cups	eq	1.3.7__11.el5_4.6
cups	eq	1.4.2__35.el6
cups	eq	1.3.7__18.el5_5.7