NVD

Id
41750  
Name
CVE-2013-6891  
Description
lppasswd in CUPS before 1.7.1, when running with setuid privileges, allows local users to read portions of arbitrary files via a modified HOME environment variable and a symlink attack involving .cups/client.conf.  
Reject
 
CVSS Version
2  
CVSS Score
1.2  
Severity
Low  
CVSS Base Score
1.2  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
1.9  
CVSS Vector
(AV:L/AC:H/Au:N/C:P/I:N/A:N)  
Pub Date
2017-01-18  
Published
2014-01-25  
Modified Date
2014-03-05  
Seq
2013-6891  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
210989 41750 CVE-2013-6891 http://advisories.mageia.org/MGASA-2014-0021.html  View
210990 41750 CVE-2013-6891 http://www.cups.org/blog.php?L704  View
210991 41750 CVE-2013-6891 http://www.cups.org/str.php?L4319  View
210992 41750 CVE-2013-6891 MDVSA-2014:015  View
210993 41750 CVE-2013-6891 USN-2082-1  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
24350 JVNDB-2013-005925 CUPS の lppasswd における任意のファイルの一部を読まれる脆弱性 CUPS の lppasswd には、setuid 権限を伴って実行されている場合、任意のファイルの一部を読まれる脆弱性が存在します。 CVE-2013-6891 66833 CVE-2013-6891 41750 1.2 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-005925.html 2013-12-21 2015-08-03 View