CVE-2014-3537

Published: Jul 23, 2014Modified: May 6, 2026

1.2

Vector

AV:L/AC:H/Au:N/C:P/I:N/A:N

Exploitability: 1.9 / Impact: 2.9

Source: NVD

Description

The web interface in CUPS before 1.7.4 allows local users in the lp group to read arbitrary files via a symlink attack on a file in /var/cache/cups/rss/.

Affected (10)

Products: Apple: Cups · Canonical: Ubuntu Linux · Fedoraproject: Fedora

1 product

1 product

1 product

Configuration A

6 vulnerable

Vulnerable Software	Affected Versions
Apple Cups	Up to 1.7.3
Apple Cups	Version 1.7.0
Apple Cups	Version 1.7.1
Apple Cups	Version 1.7.1 b1
Apple Cups	Version 1.7.2
Apple Cups	Version 1.7 rc1

Configuration B

4 vulnerable

Vulnerable Software	Affected Versions
Canonical Ubuntu Linux	Version 10.04
Canonical Ubuntu Linux	Version 12.04
Canonical Ubuntu Linux	Version 14.04
Fedoraproject Fedora	Version 20

Related CWEs

CWE-59

Improper Link Resolution Before File Access ('Link Following')

The product attempts to access a file based on the filename, but it does not properly prevent that filename from identifying a link or shortcut that resolves to an unintended resource.

References (30)

http://advisories.mageia.org/MGASA-2014-0313.html

Source: secalert@redhat.com

http://archives.neohapsis.com/archives/bugtraq/2014-10/0101.html

Source: secalert@redhat.com

http://lists.fedoraproject.org/pipermail/package-announce/2014-July/135528.html

Source: secalert@redhat.com

http://rhn.redhat.com/errata/RHSA-2014-1388.html

Source: secalert@redhat.com

http://secunia.com/advisories/59945

Source: secalert@redhat.com

http://secunia.com/advisories/60273

Source: secalert@redhat.com

http://secunia.com/advisories/60787

Source: secalert@redhat.com

http://www.cups.org/blog.php?L724

Source: secalert@redhat.com

Vendor Advisory

http://www.cups.org/str.php?L4450

Source: secalert@redhat.com

http://www.mandriva.com/security/advisories?name=MDVSA-2015:108

Source: secalert@redhat.com

http://www.securityfocus.com/bid/68788

Source: secalert@redhat.com

Vendor Advisory

http://www.securitytracker.com/id/1030611

Source: secalert@redhat.com

http://www.ubuntu.com/usn/USN-2293-1

Source: secalert@redhat.com

https://bugzilla.redhat.com/show_bug.cgi?id=1115576

Source: secalert@redhat.com

https://support.apple.com/kb/HT6535

Source: secalert@redhat.com

http://advisories.mageia.org/MGASA-2014-0313.html