CVE-2014-3537 in Apple Mac OS X
Summary
The web interface in CUPS before 1.7.4 allows local users in the lp group to read arbitrary files via a symlink attack on a file in /var/cache/cups/rss/.
Reservation
05/14/2014
Disclosure
07/23/2014
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 68003 | Apple Mac OS X link following | 59 | Not defined | Official fix | CVE-2014-3537 |
| 67187 | CUPS get_file link following | 59 | High | Official fix | CVE-2014-3537 |