Fluid Attacks Database

Description

The web interface in CUPS before 2.0 does not check that files have world-readable permissions, which allows remote attackers to obtains sensitive information via unspecified vectors.

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem	Component	Affected version	Patched versions
debian 13	cups	>=0 <1.7.4-2	1.7.4-2
debian 14	cups	>=0 <1.7.4-2	1.7.4-2
debian 12	cups	>=0 <1.7.4-2	1.7.4-2
rpm rhel7	cups	<1:1.6.3-17.el7	1:1.6.3-17.el7
rpm rhel5	cups	-	-
rpm rhel6	cups	<1:1.4.2-67.el6	1:1.4.2-67.el6

Aliases

1. CVE-2014-50312. NVD-2014-50313. OSV-DEBIAN-2014-50314. OSV-2014-50315. SECURITY-TRACKER-CVE-2014-5031

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.