CVE-2010-2431

EPSS 0.06%

發布日:2010/6/22修改日:2026/4/28

也稱為:DEBIAN-CVE-2010-2431

描述

The cupsFileOpen function in CUPS before 1.4.4 allows local users, with lp group membership, to overwrite arbitrary files via a symlink attack on the (1) /var/cache/cups/remote.cache or (2) /var/cache/cups/job.cache file.

受影響套件(1)

Debian/cupsfrom 0, < 1.4.4-1

參考連結(1)

ADVISORYhttps://security-tracker.debian.org/tracker/CVE-2010-2431