module
CUPS IPP Attributes LAN Remote Code Execution
Disclosed |
---|
Sep 26, 2024 |
Disclosed
Sep 26, 2024
Description
This module exploits vulnerabilities in OpenPrinting CUPS, which is running by
default on most Linux distributions. The vulnerabilities allow an attacker on
the LAN to advertise a malicious printer that triggers remote code execution
when a victim sends a print job to the malicious printer. Successful exploitation
requires user interaction, but no CUPS services need to be reachable via accessible
ports. Code execution occurs in the context of the lp user. Affected versions
are cups-browsed cups-filters
default on most Linux distributions. The vulnerabilities allow an attacker on
the LAN to advertise a malicious printer that triggers remote code execution
when a victim sends a print job to the malicious printer. Successful exploitation
requires user interaction, but no CUPS services need to be reachable via accessible
ports. Code execution occurs in the context of the lp user. Affected versions
are cups-browsed cups-filters

NEW
Explore Exposure Command
Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.