CVE-2012-4510

cups-pk-helper before 0.2.3 does not properly wrap the (1) cupsGetFile and (2) cupsPutFile function calls, which allows user-assisted remote attackers to read or overwrite sensitive files using CUPS resources.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
5.8 UNKNOWN
NETWORK
MEDIUM
AV:N/AC:M/Au:N/C:P/I:P/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 58%
Affected Products (NVD)
VendorProductVersion
cups-pk-helper_projectcups-pk-helper
𝑥
≤ 0.2.2
cups-pk-helper_projectcups-pk-helper
0.0.1
cups-pk-helper_projectcups-pk-helper
0.0.2
cups-pk-helper_projectcups-pk-helper
0.0.3
cups-pk-helper_projectcups-pk-helper
0.0.4
cups-pk-helper_projectcups-pk-helper
0.1.0
cups-pk-helper_projectcups-pk-helper
0.1.1
cups-pk-helper_projectcups-pk-helper
0.1.2
cups-pk-helper_projectcups-pk-helper
0.1.3
cups-pk-helper_projectcups-pk-helper
0.2.0
cups-pk-helper_projectcups-pk-helper
0.2.1
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
cups-pk-helper
bookworm
0.2.6-1
fixed
bullseye
0.2.6-1
fixed
sid
0.2.6-2.1
fixed
trixie
0.2.6-2.1
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
cups-pk-helper
hardy
dne
lucid
dne
natty
ignored
oneiric
Fixed 0.1.2-1ubuntu0.1
released
precise
Fixed 0.2.1.2-1ubuntu0.1
released
quantal
Fixed 0.2.1.2-1ubuntu1.1
released
raring
not-affected
saucy
not-affected
openSUSE logo
openSUSE / SLES Releases
openSUSE Product
Release
cups-pk-helper
suse enterprise desktop 15
0.2.6-1.36
fixed
suse enterprise desktop 15 SP1
0.2.6-1.36
fixed
suse enterprise desktop 15 SP2
0.2.6-1.36
fixed
suse enterprise desktop 15 SP3
0.2.6-1.36
fixed
suse enterprise desktop 15 SP4
0.2.6-150400.12.12
fixed
suse enterprise desktop 15 SP5
0.2.6-150400.12.12
fixed
suse enterprise desktop 15 SP6
0.2.7-150600.1.3
fixed
suse enterprise desktop 15 SP7
0.2.7-150600.1.3
fixed
suse enterprise sap 12 SP5
0.2.5-5.1
fixed
suse enterprise sap 15
0.2.6-1.36
fixed
suse enterprise sap 15 SP1
0.2.6-1.36
fixed
suse enterprise sap 15 SP2
0.2.6-1.36
fixed
suse enterprise sap 15 SP3
0.2.6-1.36
fixed
suse enterprise sap 15 SP4
0.2.6-150400.12.12
fixed
suse enterprise sap 15 SP5
0.2.6-150400.12.12
fixed
suse enterprise sap 15 SP6
0.2.7-150600.1.3
fixed
suse enterprise sap 15 SP7
0.2.7-150600.1.3
fixed
suse enterprise server 12
0.2.5-3.75
fixed
suse enterprise server 12 SP1
0.2.5-3.75
fixed
suse enterprise server 12 SP2
0.2.5-3.75
fixed
suse enterprise server 12 SP3
0.2.5-5.1
fixed
suse enterprise server 12 SP4
0.2.5-5.1
fixed
suse enterprise server 12 SP5
0.2.5-5.1
fixed
suse enterprise server 15
0.2.6-1.36
fixed
suse enterprise server 15 SP1
0.2.6-1.36
fixed
suse enterprise server 15 SP2
0.2.6-1.36
fixed
suse enterprise server 15 SP3
0.2.6-1.36
fixed
suse enterprise server 15 SP4
0.2.6-150400.12.12
fixed
suse enterprise server 15 SP5
0.2.6-150400.12.12
fixed
suse enterprise server 15 SP6
0.2.7-150600.1.3
fixed
suse enterprise server 15 SP7
0.2.7-150600.1.3
fixed
cups-pk-helper-lang
suse enterprise desktop 15
0.2.6-1.36
fixed
suse enterprise desktop 15 SP1
0.2.6-1.36
fixed
suse enterprise desktop 15 SP2
0.2.6-1.36
fixed
suse enterprise desktop 15 SP3
0.2.6-1.36
fixed
suse enterprise desktop 15 SP4
0.2.6-150400.12.12
fixed
suse enterprise desktop 15 SP5
0.2.6-150400.12.12
fixed
suse enterprise desktop 15 SP6
0.2.7-150600.1.3
fixed
suse enterprise desktop 15 SP7
0.2.7-150600.1.3
fixed
suse enterprise sap 12 SP5
0.2.5-5.1
fixed
suse enterprise sap 15
0.2.6-1.36
fixed
suse enterprise sap 15 SP1
0.2.6-1.36
fixed
suse enterprise sap 15 SP2
0.2.6-1.36
fixed
suse enterprise sap 15 SP3
0.2.6-1.36
fixed
suse enterprise sap 15 SP4
0.2.6-150400.12.12
fixed
suse enterprise sap 15 SP5
0.2.6-150400.12.12
fixed
suse enterprise sap 15 SP6
0.2.7-150600.1.3
fixed
suse enterprise sap 15 SP7
0.2.7-150600.1.3
fixed
suse enterprise server 12
0.2.5-3.75
fixed
suse enterprise server 12 SP1
0.2.5-3.75
fixed
suse enterprise server 12 SP2
0.2.5-3.75
fixed
suse enterprise server 12 SP3
0.2.5-5.1
fixed
suse enterprise server 12 SP4
0.2.5-5.1
fixed
suse enterprise server 12 SP5
0.2.5-5.1
fixed
suse enterprise server 15
0.2.6-1.36
fixed
suse enterprise server 15 SP1
0.2.6-1.36
fixed
suse enterprise server 15 SP2
0.2.6-1.36
fixed
suse enterprise server 15 SP3
0.2.6-1.36
fixed
suse enterprise server 15 SP4
0.2.6-150400.12.12
fixed
suse enterprise server 15 SP5
0.2.6-150400.12.12
fixed
suse enterprise server 15 SP6
0.2.7-150600.1.3
fixed
suse enterprise server 15 SP7
0.2.7-150600.1.3
fixed
Common Weakness Enumeration
References
http://www.debian.org/security/2012/dsa-2562
http://www.mandriva.com/security/advisories?name=MDVSA-2013:069
http://www.openwall.com/lists/oss-security/2012/10/12/2
http://www.debian.org/security/2012/dsa-2562
http://www.mandriva.com/security/advisories?name=MDVSA-2013:069
http://www.openwall.com/lists/oss-security/2012/10/12/2