PT-2002-3144 · Apple · Cups

Publicado

1970-01-01

·

Atualizado

2017-10-10

·

CVE-2002-1366

CVSS v2.0

10

Alta

VetorAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions CUPS versions 1.1.14 through 1.1.17
Description The issue affects the Common Unix Printing System (CUPS) and can lead to a breach of confidentiality, integrity, and availability of protected information. Exploitation can be carried out remotely. Local users with lp privileges can create or overwrite arbitrary files via file race conditions.
Recommendations For versions 1.1.14 through 1.1.17, consider updating to a version outside of this range to mitigate the risk, as no specific fix is provided within the given information. As a temporary workaround, consider restricting access to the lp privileges to minimize the risk of exploitation.

Correção

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Identificadores relacionados

BDU:2015-01804
BDU:2015-01805
BDU:2015-07982
BDU:2015-07983
BDU:2015-07984
BDU:2015-07985
BDU:2015-07986
BDU:2015-07987
CVE-2002-1366
DSA-232

Produtos afetados

Cups