CVE-2013-6891

1.2

LOWCVSS v2

Published

January 26, 2014

Affected

1 project

Assigned by

MITRE

Severity scale

010

Description

lppasswd in CUPS before 1.7.1, when running with setuid privileges, allows local users to read portions of arbitrary files via a modified HOME environment variable and a symlink attack involving .cups/client.conf.

apple/cups

GitHubApple CUPS Sources

= 1.7.1, = 1.7, <= 1.7.0NVD

More on this CVE

NVD↗GitHub Advisory↗

Security Advisories

CVE-2013-6891

Description

More on this CVE