CVE-2014-3537
EPSS 0.05%cups - security update
發布日:2014/7/23修改日:2026/4/28
也稱為:DEBIAN-CVE-2014-3537
描述
The web interface in CUPS before 1.7.4 allows local users in the lp group to read arbitrary files via a symlink attack on a file in /var/cache/cups/rss/.
受影響套件(3)
- Debian/cupsfrom 0, < 1.7.4-1
- Debian/cupsfrom 0, < 1.4.4-7+squeeze6
- Debian/cupsfrom 0, < 1.5.3-5+deb7u4