CVE-2009-0032

CUPS on Mandriva Linux 2008.0, 2008.1, 2009.0, Corporate Server (CS) 3.0 and 4.0, and Multi Network Firewall (MNF) 2.0 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/pdf.log temporary file.
Link Following
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
6.9 UNKNOWN
LOCAL
MEDIUM
AV:L/AC:M/Au:N/C:C/I:C/A:C
redhatCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 7%
VendorProductVersion
applecups
*
𝑥
= Vulnerable software versions
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
cups
intrepid
not-affected
hardy
dne
gutsy
dne
dapper
dne
cupsys
intrepid
dne
hardy
not-affected
gutsy
not-affected
dapper
not-affected
Common Weakness Enumeration
References
http://securitytracker.com/id?1021637
http://www.mandriva.com/security/advisories?name=MDVSA-2009:027
http://www.mandriva.com/security/advisories?name=MDVSA-2009:028
http://www.mandriva.com/security/advisories?name=MDVSA-2009:029
http://www.securityfocus.com/bid/33418
https://exchange.xforce.ibmcloud.com/vulnerabilities/48210
http://securitytracker.com/id?1021637
http://www.mandriva.com/security/advisories?name=MDVSA-2009:027
http://www.mandriva.com/security/advisories?name=MDVSA-2009:028
http://www.mandriva.com/security/advisories?name=MDVSA-2009:029
http://www.securityfocus.com/bid/33418
https://exchange.xforce.ibmcloud.com/vulnerabilities/48210