The cupsFileOpen function in CUPS before 1.4.4 allows local users, with lp group membership, to overwrite arbitrary files via a symlink attack on the (1) /var/cache/cups/remote.cache or (2) /var/cache/cups/job.cache file.
CVSS Details
- CVSS 3.1 Base Score: 5.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade cups-libsUpgrade cupsUpgrade cups-develUpgrade cups-lpd | Dec 1, 2016 | Jun 22, 2010 |
| Debian | — | Upgrade cups | Jul 30, 2024 | Jun 22, 2010 |
| Gentoo Linux | — | Upgrade net-print/cups. | Oct 30, 2017 | Jun 22, 2010 |
| Oracle_linux | — | Upgrade cups-libsUpgrade cups-lpdUpgrade cupsUpgrade cups-devel | Oct 16, 2024 | Jun 22, 2010 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jun 15, 2010 |
| Suse | — | Upgrade cups-libsUpgrade cups-libs-32bitUpgrade cups-libs-x86Upgrade cups-clientUpgrade cupsUpgrade cups-devel | Dec 12, 2013 | Jun 28, 2013 |
| Ubuntu | — | Upgrade cupsysUpgrade cups | Nov 19, 2024 | Jun 22, 2010 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub