Fluid Attacks Database

Description

CUPS before 2.0 allows local users to read arbitrary files via a symlink attack on (1) index.html, (2) index.class, (3) index.pl, (4) index.php, (5) index.pyc, or (6) index.py.

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem	Package	Affected version	Patched versions
debian 12	cups	>=0 <1.7.4-2	1.7.4-2
debian 13	cups	>=0 <1.7.4-2	1.7.4-2
debian 14	cups	>=0 <1.7.4-2	1.7.4-2
rpm rhel6	cups	<1:1.4.2-67.el6	1:1.4.2-67.el6
rpm rhel7	cups	<1:1.6.3-17.el7	1:1.6.3-17.el7
rpm rhel5	cups	-	-
debian 11	cups	>=0 <1.7.4-2	1.7.4-2

Aliases

1. CVE-2014-50302. NVD-2014-50303. OSV-DEBIAN-2014-50304. OSV-2014-50305. SECURITY-TRACKER-CVE-2014-5030

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.