p PatchFirst

CVE-2013-6891

CVE-2013-6891

This page contains facts from public vulnerability sources. Check the original advisory before updating.

lppasswd in CUPS before 1.7.1, when running with setuid privileges, allows local users to read portions of arbitrary files via a modified HOME environment variable and a symlink attack involving .cups/client.conf.

EPSS 0.4% · Fix available

Published
Updated

Stack: system

Affected products and versions

  • n/a

    Versions
    • n/a: Affected

    No fix published

  • cups Debian:12

    Affected ranges
    • ECOSYSTEM: < 1.7.1-1

    Update to 1.7.1-1

  • cups Debian:13

    Affected ranges
    • ECOSYSTEM: < 1.7.1-1

    Update to 1.7.1-1

  • cups Debian:14

    Affected ranges
    • ECOSYSTEM: < 1.7.1-1

    Update to 1.7.1-1

Original sources

Check your server →