CVE-2009-0032 : CUPS on Mandriva Linux 2008.0, 2008.1, 2009.0, Corporate Server (CS) 3.0 and 4.0

CUPS on Mandriva Linux 2008.0, 2008.1, 2009.0, Corporate Server (CS) 3.0 and 4.0, and Multi Network Firewall (MNF) 2.0 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/pdf.log temporary file.

Published 2009-01-27 20:30:00

Updated 2017-08-08 01:33:46

Source Red Hat, Inc.

View at NVD, CVE.org

Products affected by CVE-2009-0032

Apple » Cups
cpe:2.3:a:apple:cups:*:*:*:*:*:*:*:*
Matching versions
When used together with: Mandriva » Corporate Server » Version: 3.0
When used together with: Mandriva » Corporate Server » Version: 3.0 X86 64 Edition
When used together with: Mandriva » Corporate Server » Version: 4.0
When used together with: Mandriva » Corporate Server » Version: 4.0 X86 64 Edition
When used together with: Mandriva » Linux » Version: 2008.0
When used together with: Mandriva » Linux » Version: 2008.0 X86 64 Edition
When used together with: Mandriva » Linux » Version: 2008.1
When used together with: Mandriva » Linux » Version: 2008.1 X86 64 Edition
When used together with: Mandriva » Linux » Version: 2009.0
When used together with: Mandriva » Multi Network Firewall » Version: 2.0

Exploit prediction scoring system (EPSS) score for CVE-2009-0032

EPSS FAQ

0.04%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 6 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2009-0032

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source	First Seen
6.9	MEDIUM	AV:L/AC:M/Au:N/C:C/I:C/A:C	3.4	10.0	NIST
Access Vector: Local Access Complexity: Medium Authentication: None Confidentiality Impact: Complete Integrity Impact: Complete Availability Impact: Complete

CWE ids for CVE-2009-0032

CWE-59 Improper Link Resolution Before File Access ('Link Following')

The product attempts to access a file based on the filename, but it does not properly prevent that filename from identifying a link or shortcut that resolves to an unintended resource.

Assigned by: nvd@nist.gov (Primary)

Vendor statements for CVE-2009-0032

Red Hat 2009-01-27

Not vulnerable. Red Hat does not ship the vulnerable backend that causes this flaw.

References for CVE-2009-0032

https://exchange.xforce.ibmcloud.com/vulnerabilities/48210
http://www.mandriva.com/security/advisories?name=MDVSA-2009:029

Mandriva
Vendor Advisory

CVEs referencing this url
http://www.mandriva.com/security/advisories?name=MDVSA-2009:028

Mandriva

CVEs referencing this url
http://www.mandriva.com/security/advisories?name=MDVSA-2009:027

Vendor Advisory
http://www.securityfocus.com/bid/33418
http://securitytracker.com/id?1021637