PT-2012-1087 · Apple+3 · Cups+3

Yves-Alexis Perez · Published 2012-11-20 · Updated 2024-06-15 · CVE-2012-5519

Positive Technologies (AI Summary)

CVSS v2.0

7.2

High

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions CUPS versions 1.3.7 through 1.4.4 CUPS version 1.4.4

Description The issue allows local users in the lpadmin group to read or write arbitrary files as root by leveraging the web interface, potentially leading to a violation of confidentiality, integrity, and availability of protected information. This can be exploited locally.

Recommendations For CUPS versions 1.3.7 through 1.4.4, consider restricting access to the web interface to minimize the risk of exploitation. For CUPS version 1.4.4, as a temporary workaround, consider disabling the web interface until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Weakness Enumeration

CWE-264

Related Identifiers

ALT-PU-2015-2012

BDU:2015-06713

BDU:2015-08908

CESA-2013_0580

CESA-2015_1123

CVE-2012-5519

DSA-2600-1

ELSA-2013-0580

OPENSUSE-SU-2015_1056-1

OPENSUSE-SU-2024:10075-1

RHSA-2013:0580

RHSA-2013_0580

RHSA-2015_1123

SUSE-SU-2013_1655-1

SUSE-SU-2014_1023-1

SUSE-SU-2015:0575-1

SUSE-SU-2015:1011-1

SUSE-SU-2015:1041-1

SUSE-SU-2015:1044-1

SUSE-SU-2015:1044-2

SUSE-SU-2015_1041-1

SUSE-SU-2015_1044-1

SUSE-SU-2015_1044-2

Affected Products

Cups

Centos

Red Hat

Suse

References · 50

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/post/multi/escalate/cups_root_file_read.rb · Exploit
• 🔥 https://github.com/0x00string/oldays/blob/master/CVE-2015-1158.py · Exploit
• 🔥 https://github.com/p1ckzi/CVE-2012-5519 · Exploit
• 🔥 http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=692791 · Exploit
• http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00006.html · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:10075-1 · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2013-0580.html · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2015:1044-1 · Vendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00010.html · Vendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00003.html · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2015:1041-1 · Vendor Advisory
• http://ubuntu.com/usn/USN-1654-1 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2012-5519 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2015:1044-2 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2012-5519 · Vendor Advisory