CVE-2013-6891

Published: Jan 26, 2014Modified: Apr 29, 2026

1.2

Vector

AV:L/AC:H/Au:N/C:P/I:N/A:N

Exploitability: 1.9 / Impact: 2.9

Source: NVD

Description

lppasswd in CUPS before 1.7.1, when running with setuid privileges, allows local users to read portions of arbitrary files via a modified HOME environment variable and a symlink attack involving .cups/client.conf.

Affected (6)

Products: Apple: Cups · Canonical: Ubuntu Linux

1 product

1 product

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Apple Cups	Up to 1.7.0
Apple Cups	Version 1.7.1 b1
Apple Cups	Version 1.7 rc1

Configuration B

3 vulnerable

Vulnerable Software	Affected Versions
Canonical Ubuntu Linux	Version 12.10
Canonical Ubuntu Linux	Version 13.04
Canonical Ubuntu Linux	Version 13.10

Related CWEs

CWE-59

Improper Link Resolution Before File Access ('Link Following')

The product attempts to access a file based on the filename, but it does not properly prevent that filename from identifying a link or shortcut that resolves to an unintended resource.

References (12)

http://advisories.mageia.org/MGASA-2014-0021.html

Source: cve@mitre.org

http://secunia.com/advisories/56531

Source: cve@mitre.org

Vendor Advisory

http://www.cups.org/blog.php?L704

Source: cve@mitre.org

http://www.cups.org/str.php?L4319

Source: cve@mitre.org

ExploitPatch

http://www.mandriva.com/security/advisories?name=MDVSA-2014:015

Source: cve@mitre.org

http://www.ubuntu.com/usn/USN-2082-1

Source: cve@mitre.org

http://advisories.mageia.org/MGASA-2014-0021.html