Common Unix Printing System (CUPS) 1.1.14 through 1.1.17 allows local users with lp privileges to create or overwrite arbitrary files via file race conditions, as demonstrated by ice-cream.
| Software | From | Fixed in |
|---|---|---|
| easy_software_products / cups | 1.1.10 | 1.1.10.x |
| easy_software_products / cups | 1.1.7 | 1.1.7.x |
| easy_software_products / cups | 1.1.13 | 1.1.13.x |
| easy_software_products / cups | 1.1.17 | 1.1.17.x |
| easy_software_products / cups | 1.1.4 | 1.1.4.x |
| easy_software_products / cups | 1.1.1 | 1.1.1.x |
| easy_software_products / cups | 1.0.4 | 1.0.4.x |
| easy_software_products / cups | 1.1.14 | 1.1.14.x |
| easy_software_products / cups | 1.1.6 | 1.1.6.x |
| apple / mac_os_x | 10.2.2 | 10.2.2.x |
| apple / mac_os_x | 10.2 | 10.2.x |