https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-02T14:35:59.214748+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2014-5029 CVE-2014-5029 2026-10-02T14:35:59.329756+00:00

The web interface in CUPS 1.7.4 allows local users in the lp group to read arbitrary files via a symlink attack on a file in /var/cache/cups/rss/ and language[0] set to null. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-3537.

 https://vulnerability.circl.lu/vuln/usn-2341-1 USN-2341-1 — cups vulnerabilities 2026-10-02T14:35:59.329852+00:00

Affected: Ubuntu:14.04:LTS: cups

Salvatore Bonaccorso discovered that the CUPS web interface incorrectly validated permissions and incorrectly handled symlinks. An attacker could possibly use this issue to bypass file permissions and read arbitrary files, possibly leading to a privilege escalation.