CVE-2014-5030 in CUPS

Riassunto

di MITRE

CUPS before 2.0 allows local users to read arbitrary files via a symlink attack on (1) index.html, (2) index.class, (3) index.pl, (4) index.php, (5) index.pyc, or (6) index.py.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

• Prenotare: 22/07/2014
• Divulgazione: 29/07/2014
• Moderazione: accettato
• Voce: VDB-67240
• CPE: pronto
• CWE: CWE-59 (confermato)
• CVSS: 1.9 (NVD)
• EPSS: 0.00362
• KEV: no
• Attività: molto basso
• Settore: Industry, Lawfirm, ...

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2014-5030
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2014-5030
• CVE Details: https://www.cvedetails.com/cve/CVE-2014-5030/