p PatchFirst

CVE-2010-0393

CVE-2010-0393

This page contains facts from public vulnerability sources. Check the original advisory before updating.

The _cupsGetlang function, as used by lppasswd.c in lppasswd in CUPS 1.2.2, 1.3.7, 1.3.9, and 1.4.1, relies on an environment variable to determine the file that provides localized message strings, which allows local users to gain privileges via a file that contains crafted localization data with format string specifiers.

EPSS 0.3% · Fix available

Published
Updated

Stack: system

Affected products and versions

  • n/a

    Versions
    • n/a: Affected

    No fix published

  • cups Debian:12

    Affected ranges
    • ECOSYSTEM: < 1.4.2-9.1

    Update to 1.4.2-9.1

  • cups Debian:13

    Affected ranges
    • ECOSYSTEM: < 1.4.2-9.1

    Update to 1.4.2-9.1

  • cups Debian:14

    Affected ranges
    • ECOSYSTEM: < 1.4.2-9.1

    Update to 1.4.2-9.1

Original sources

Check your server →