CVE-2013-6891
EPSS 0.05%Published: 1/26/2014Modified: 4/28/2026
Also known as:DEBIAN-CVE-2013-6891
Description
lppasswd in CUPS before 1.7.1, when running with setuid privileges, allows local users to read portions of arbitrary files via a modified HOME environment variable and a symlink attack involving .cups/client.conf.
Affected packages (1)
- Debian/cupsfrom 0, < 1.7.1-1