CVE-2013-6891
EPSS 0.05%發布日:2014/1/26修改日:2026/4/28
也稱為:DEBIAN-CVE-2013-6891
描述
lppasswd in CUPS before 1.7.1, when running with setuid privileges, allows local users to read portions of arbitrary files via a modified HOME environment variable and a symlink attack involving .cups/client.conf.
受影響套件(1)
- Debian/cupsfrom 0, < 1.7.1-1