CVE-2014-3537
23.07.2014, 14:55
The web interface in CUPS before 1.7.4 allows local users in the lp group to read arbitrary files via a symlink attack on a file in /var/cache/cups/rss/.
| Vendor | Product | Version |
|---|---|---|
| apple | cups | 𝑥 ≤ 1.7.3 |
| apple | cups | 1.7:rc1 |
| apple | cups | 1.7.0 |
| apple | cups | 1.7.1 |
| apple | cups | 1.7.1:b1 |
| apple | cups | 1.7.2 |
| canonical | ubuntu_linux | 10.04 |
| canonical | ubuntu_linux | 12.04 |
| canonical | ubuntu_linux | 14.04 |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases
References