CVE-2014-5029
Published: 29 July 2014
The web interface in CUPS 1.7.4 allows local users in the lp group to read arbitrary files via a symlink attack on a file in /var/cache/cups/rss/ and language[0] set to null. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-3537.
Notes
| Author | Note |
|---|---|
| mdeslaur | The patch below introduces a regression preventing the web interface from being able to read log files. (See comments in bug 4455.) |
Priority
Status
| Package | Release | Status |
|---|---|---|
|
cups Launchpad, Ubuntu, Debian |
lucid |
Released
(1.4.3-1ubuntu1.13)
|
| precise |
Released
(1.5.3-0ubuntu8.5)
|
|
| trusty |
Released
(1.7.2-0ubuntu1.2)
|
|
| upstream |
Released
(1.7.4-5)
|
|
|
Patches: upstream: https://cups.org/strfiles.php/3371/str4455-1.7.patch |
||