CVE-2013-6891 : lppasswd in CUPS before 1.7.1, when running with setuid privileges, allows local

lppasswd in CUPS before 1.7.1, when running with setuid privileges, allows local users to read portions of arbitrary files via a modified HOME environment variable and a symlink attack involving .cups/client.conf.

Published 2014-01-26 01:55:10

Updated 2014-03-06 04:49:52

Source MITRE

View at NVD, CVE.org

Products affected by CVE-2013-6891

Apple » Cups
Versions up to, including, (<=) 1.7.0
cpe:2.3:a:apple:cups:*:*:*:*:*:*:*:*
Matching versions
Apple » Cups » Version: 1.7 Update RC1
cpe:2.3:a:apple:cups:1.7:rc1:*:*:*:*:*:*
Matching versions
Apple » Cups » Version: 1.7.1 Update B1
cpe:2.3:a:apple:cups:1.7.1:b1:*:*:*:*:*:*
Matching versions
Canonical » Ubuntu Linux » Version: 13.04
cpe:2.3:o:canonical:ubuntu_linux:13.04:*:*:*:*:*:*:*
Matching versions
Canonical » Ubuntu Linux » Version: 12.10
cpe:2.3:o:canonical:ubuntu_linux:12.10:*:*:*:*:*:*:*
Matching versions
Canonical » Ubuntu Linux » Version: 13.10
cpe:2.3:o:canonical:ubuntu_linux:13.10:*:*:*:*:*:*:*
Matching versions

Threat overview for CVE-2013-6891

Top countries where our scanners detected CVE-2013-6891

Top open port discovered on systems with this issue 631

IPs affected by CVE-2013-6891 19,270

Threat actors abusing to this issue? Yes

Find out if you^* are affected by CVE-2013-6891!

^*Directly or indirectly through your vendors, service providers and 3rd parties. Powered by attack surface intelligence from SecurityScorecard.

Exploit prediction scoring system (EPSS) score for CVE-2013-6891

EPSS FAQ

0.04%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 6 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2013-6891

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source	First Seen
1.2	LOW	AV:L/AC:H/Au:N/C:P/I:N/A:N	1.9	2.9	NIST
Access Vector: Local Access Complexity: High Authentication: None Confidentiality Impact: Partial Integrity Impact: None Availability Impact: None

CWE ids for CVE-2013-6891

CWE-59 Improper Link Resolution Before File Access ('Link Following')

The product attempts to access a file based on the filename, but it does not properly prevent that filename from identifying a link or shortcut that resolves to an unintended resource.

Assigned by: nvd@nist.gov (Primary)

References for CVE-2013-6891

http://www.cups.org/blog.php?L704

CUPS 1.7.1 - CUPS.org
http://www.cups.org/str.php?L4319

lppasswd vulnerability · Issue #4319 · apple/cups · GitHub
Exploit;Patch
http://www.ubuntu.com/usn/USN-2082-1

USN-2082-1: CUPS vulnerability | Ubuntu security notices
http://www.mandriva.com/security/advisories?name=MDVSA-2014:015

mandriva.com
http://advisories.mageia.org/MGASA-2014-0021.html

Mageia Advisory: MGASA-2014-0021 - Updated cups packages fix a security vulverability