PT-2012-1087 · Apple+3 · Cups+3

Yves-Alexis Perez · Publicado 2012-11-20 · Atualizado 2024-06-15 · CVE-2012-5519

Positive Technologies (AI Summary)

CVSS v2.0

7.2

Alta

Vetor base

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions CUPS versions 1.3.7 through 1.4.4 CUPS version 1.4.4

Description The issue allows local users in the lpadmin group to read or write arbitrary files as root by leveraging the web interface, potentially leading to a violation of confidentiality, integrity, and availability of protected information. This can be exploited locally.

Recommendations For CUPS versions 1.3.7 through 1.4.4, consider restricting access to the web interface to minimize the risk of exploitation. For CUPS version 1.4.4, as a temporary workaround, consider disabling the web interface until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

ALT-PU-2015-2012

BDU:2015-06713

BDU:2015-08908

CESA-2013_0580

CESA-2015_1123

CVE-2012-5519

DSA-2600-1

ELSA-2013-0580

OPENSUSE-SU-2015_1056-1

OPENSUSE-SU-2024:10075-1

RHSA-2013:0580

RHSA-2013_0580

RHSA-2015_1123

SUSE-SU-2013_1655-1

SUSE-SU-2014_1023-1

SUSE-SU-2015:0575-1

SUSE-SU-2015:1011-1

SUSE-SU-2015:1041-1

SUSE-SU-2015:1044-1

SUSE-SU-2015:1044-2

SUSE-SU-2015_1041-1

SUSE-SU-2015_1044-1

SUSE-SU-2015_1044-2

Produtos afetados

Cups

Centos

Red Hat

Suse

Referências · 50

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/post/multi/escalate/cups_root_file_read.rb · Exploit
• 🔥 https://github.com/0x00string/oldays/blob/master/CVE-2015-1158.py · Exploit
• 🔥 https://github.com/p1ckzi/CVE-2012-5519 · Exploit
• 🔥 http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=692791 · Exploit
• https://suse.com/support/update/announcement/2015/suse-su-20151044-2 · Nota
• https://suse.com/security/cve/CVE-2014-5030 · Nota
• http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00006.html · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2010-2941 · Nota
• https://osv.dev/vulnerability/openSUSE-SU-2024:10075-1 · Aviso do Fabricante
• https://linux.oracle.com/errata/ELSA-2013-0580.html · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2010-0393 · Nota
• http://lwn.net/Alerts/542411 · Nota
• https://suse.com/security/cve/CVE-2012-5519 · Nota
• http://openwall.com/lists/oss-security/2012/11/11/2 · Nota
• https://suse.com/security/cve/CVE-2012-6094 · Nota