The cupsFileOpen function in CUPS before 1.4.4 allows local users, with lp group membership, to overwrite arbitrary files via a symlink attack on the (1) /var/cache/cups/remote.cache or (2) /var/cache/cups/job.cache file.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2010-06-22T20:24:00

Updated: 2024-08-07T02:32:16.645Z

Reserved: 2010-06-22T00:00:00

Link: CVE-2010-2431

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2010-06-22T20:30:01.757

Modified: 2024-11-21T01:16:38.813

Link: CVE-2010-2431

cve-icon Redhat

Severity : Low

Publid Date: 2010-06-15T00:00:00Z

Links: CVE-2010-2431 - Bugzilla