ISOMAN

CVE

CVE-2012-5519

CUPS 1.4.4, when running in certain Linux distributions such as Debian GNU/Linux, stores the web interface administrator key in /var/run/cups/certs/0 using certain permissions, which allows local users in the lpadmin group to read or write arbitrary files as root by leveraging the web interface.

Severity
HIGH
CVSS
7.2
Published
Modified
NVD detailAll CVEs

Linked Releases

DistributionReleaseStatusEvidence
Debian13.5.0 amd64 netinstunknownsource
Debian13.5.0 amd64 edu netinstunknownsource
Debian13.5.0 amd64 mac netinstunknownsource
Debian13.5.0 arm64 netinstunknownsource
Debian13.5.0 amd64 dvd-1unknownsource
Debian13.5.0 arm64 dvd-1unknownsource
Debian13.5.0 amd64 live gnomeunknownsource
Debian13.5.0 amd64 live kdeunknownsource
Debian13.5.0 amd64 live cinnamonunknownsource
Debian13.5.0 amd64 live lxdeunknownsource
Debian13.5.0 amd64 live lxqtunknownsource
Debian13.5.0 amd64 live mateunknownsource
Debian13.5.0 amd64 live xfceunknownsource
Debian13.5.0 amd64 live standardunknownsource
Debian13.5.0 amd64 live debian-juniorunknownsource
Debian13.5.0 armhf netinstunknownsource
Debian13.5.0 ppc64el netinstunknownsource
Debian13.5.0 riscv64 netinstunknownsource
Debian13.5.0 s390x netinstunknownsource
Debian13.5.0 armhf dvd-1unknownsource
Debian13.5.0 ppc64el dvd-1unknownsource
Debian13.5.0 riscv64 dvd-1unknownsource
Debian13.5.0 s390x dvd-1unknownsource
Debian13.6.0 amd64 netinstunknownsource
Debian13.6.0 amd64 edu netinstunknownsource
Debian13.6.0 amd64 mac netinstunknownsource
Debian13.6.0 arm64 netinstunknownsource
Debian13.6.0 amd64 dvd-1unknownsource
Debian13.6.0 arm64 dvd-1unknownsource
Debian13.6.0 amd64 live gnomeunknownsource
Debian13.6.0 amd64 live kdeunknownsource
Debian13.6.0 amd64 live cinnamonunknownsource
Debian13.6.0 amd64 live lxdeunknownsource
Debian13.6.0 amd64 live lxqtunknownsource
Debian13.6.0 amd64 live mateunknownsource
Debian13.6.0 amd64 live xfceunknownsource
Debian13.6.0 amd64 live standardunknownsource
Debian13.6.0 amd64 live debian-juniorunknownsource
Debian13.6.0 armhf netinstunknownsource
Debian13.6.0 ppc64el netinstunknownsource
Debian13.6.0 riscv64 netinstunknownsource
Debian13.6.0 s390x netinstunknownsource
Debian13.6.0 armhf dvd-1unknownsource
Debian13.6.0 ppc64el dvd-1unknownsource
Debian13.6.0 riscv64 dvd-1unknownsource
Debian13.6.0 s390x dvd-1unknownsource

References

  1. http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=692791
  2. http://lists.apple.com/archives/security-announce/2013/Jun/msg00000.html
  3. http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00003.html
  4. http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00006.html
  5. http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00010.html
  6. http://rhn.redhat.com/errata/RHSA-2013-0580.html
  7. http://support.apple.com/kb/HT5784
  8. http://www.openwall.com/lists/oss-security/2012/11/10/5
  9. http://www.openwall.com/lists/oss-security/2012/11/11/2
  10. http://www.openwall.com/lists/oss-security/2012/11/11/5
  11. http://www.securityfocus.com/bid/56494
  12. http://www.ubuntu.com/usn/USN-1654-1
  13. https://exchange.xforce.ibmcloud.com/vulnerabilities/80012
  14. http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=692791
  15. http://lists.apple.com/archives/security-announce/2013/Jun/msg00000.html
  16. http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00003.html
  17. http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00006.html
  18. http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00010.html
  19. http://rhn.redhat.com/errata/RHSA-2013-0580.html
  20. http://support.apple.com/kb/HT5784