cbcvebase.
CVE-2014-5030
published 2014-07-29

CVE-2014-5030: CUPS before 2.0 allows local users to read arbitrary files via a symlink attack on (1) index.html, (2) index.class, (3) index.pl, (4) index.php, (5) index.pyc…

low1.9CVSS 3.1
AVLACMAuNCPINAN
CUPS before 2.0 allows local users to read arbitrary files via a symlink attack on (1) index.html, (2) index.class, (3) index.pl, (4) index.php, (5) index.pyc, or (6) index.py.

Affected

14 ranges
VendorProductVersion rangeFixed in
applecups<= 1.7.4—
applecups——
applecups——
applecups——
applecups——
applecups——
applecups>= 0 < 1.7.4-21.7.4-2
applecups>= 0 < 1.7.4-21.7.4-2
applecups>= 0 < 1.7.4-21.7.4-2
applecups>= 0 < 1.7.4-21.7.4-2
canonicalubuntu_linux——
canonicalubuntu_linux——
canonicalubuntu_linux——
debiancups< cups 1.7.4-2 (bookworm)cups 1.7.4-2 (bookworm)

CVSS provenance

nvd1.9LOWAV:L/AC:M/Au:N/C:P/I:N/A:N
osv6.1MEDIUM