Total vulnerabilities in the database
The web interface in CUPS before 1.7.4 allows local users in the lp group to read arbitrary files via a symlink attack on a file in /var/cache/cups/rss/.
| Software | From | Fixed in |
|---|---|---|
| apple / cups | 1.7.0 | 1.7.0.x |
| apple / cups | 1.7.1-b1 | 1.7.1-b1.x |
| apple / cups | 1.7-rc1 | 1.7-rc1.x |
| apple / cups | 1.7.2 | 1.7.2.x |
| apple / cups | 1.7.1 | 1.7.1.x |
| apple / cups | - | 1.7.3.x |
| canonical / ubuntu_linux | 14.04 | 14.04.x |
| canonical / ubuntu_linux | 12.04 | 12.04.x |
| fedoraproject / fedora | 20 | 20.x |
| canonical / ubuntu_linux | 10.04 | 10.04.x |