CVE-2012-5519 CUPS 1.4.4, when running in certain Linux distributions such as Debian GNU/Linux, stores the web interface administrator key in /var/run/cups/certs/0 using certain permissions, which allows local user...
HighCVSS 7.2
EPSS 2.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
CUPS 1.4.4, when running in certain Linux distributions such as Debian GNU/Linux, stores the web interface administrator key in /var/run/cups/certs/0 using certain permissions, which allows local users in the lpadmin group to read or write arbitrary files as root by leveraging the web interface.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/cups(Debian:12) | < 1.5.3-2.7 | 1.5.3-2.7 |
| debian/cups(Debian:13) | < 1.5.3-2.7 | 1.5.3-2.7 |
| debian/cups(Debian:14) | < 1.5.3-2.7 | 1.5.3-2.7 |
| apple cups | = 1.4.4 | No fix listed |
References
- Debian Security Tracker CVE-2012-5519 vendor-advisory
- bugs.debian.org exploit
- APPLE-SA-2013-06-04-1 vendor-advisory
- SUSE-SU-2015:1041 vendor-advisory
- SUSE-SU-2015:1044 vendor-advisory
- openSUSE-SU-2015:1056 vendor-advisory
- RHSA-2013:0580 vendor-advisory
- support.apple.com
- [oss-security] 20121110 Privilege escalation (lpadmin -> root) in cups mailing-list
- [oss-security] 20121111 Re: Privilege escalation (lpadmin -> root) in cups mailing-list
- [oss-security] 20121111 Re: Privilege escalation (lpadmin -> root) in cups mailing-list
- 56494 vdb-entry
- USN-1654-1 vendor-advisory
- cups-systemgroup-priv-esc(80012) vdb-entry
- bugs.debian.org issue-tracking