CVE-2010-2431

Currently unrated

Key Information:

Vendor
Apple
Status
Cups
Vendor
CVE Published:
22 June 2010

Summary

The cupsFileOpen function in CUPS before 1.4.4 allows local users, with lp group membership, to overwrite arbitrary files via a symlink attack on the (1) /var/cache/cups/remote.cache or (2) /var/cache/cups/job.cache file.

References

http://www.mandriva.com/security/advisories?name=MDVSA-20...
vendor-advisoryx_refsource_MANDRIVA
http://rhn.redhat.com/errata/RHSA-2010-0811.html
vendor-advisoryx_refsource_REDHAT
http://cups.org/articles.php?L596
x_refsource_CONFIRM

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.