Skip to content
OpenAdvisories
Unscored USN-2341-1 3 CVEs

cups vulnerabilities

Published Sep 8, 2014 · Updated Apr 22, 2026

Ecosystem: Ubuntu

Summary

Salvatore Bonaccorso discovered that the CUPS web interface incorrectly
validated permissions and incorrectly handled symlinks. An attacker could
possibly use this issue to bypass file permissions and read arbitrary
files, possibly leading to a privilege escalation.

Fixed packages 1

ReleasePackageFixed in
Ubuntu · 14.04 LTS 14.04:LTS cups 1.7.2-0ubuntu1.2

Vulnerabilities 3

  • Unscored —
    CVE-2014-5029

    The web interface in CUPS 1.7.4 allows local users in the lp group to read arbitrary files via a symlink attack on a fi…

    cups cups Debian Ubuntu
  • Unscored —
    CVE-2014-5030

    CUPS before 2.0 allows local users to read arbitrary files via a symlink attack on (1) index.html, (2) index.class, (3)…

    cups cups Debian Ubuntu
  • Unscored —
    CVE-2014-5031

    The web interface in CUPS before 2.0 does not check that files have world-readable permissions, which allows remote att…

    cups cups Debian Ubuntu

References

  • report
    https://ubuntu.com/security/CVE-2014-5029
  • report
    https://ubuntu.com/security/CVE-2014-5030
  • report
    https://ubuntu.com/security/CVE-2014-5031