https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 14:35:51 +0000 https://vulnerability.circl.lu/vuln/cve-2014-5029 <p>The web interface in CUPS 1.7.4 allows local users in the lp group to read arbitrary files via a symlink attack on a file in /var/cache/cups/rss/ and language[0] set to null. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-3537.</p> <p>The web interface in CUPS 1.7.4 allows local users in the lp group to read arbitrary files via a symlink attack on a file in /var/cache/cups/rss/ and language[0] set to null. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-3537.</p> https://vulnerability.circl.lu/vuln/cve-2014-5029 https://vulnerability.circl.lu/vuln/usn-2341-1 <p><strong>Affected:</strong> Ubuntu:14.04:LTS: cups</p> <p>Salvatore Bonaccorso discovered that the CUPS web interface incorrectly validated permissions and incorrectly handled symlinks. An attacker could possibly use this issue to bypass file permissions and read arbitrary files, possibly leading to a privilege escalation.</p> <p><strong>Affected:</strong> Ubuntu:14.04:LTS: cups</p> <p>Salvatore Bonaccorso discovered that the CUPS web interface incorrectly validated permissions and incorrectly handled symlinks. An attacker could possibly use this issue to bypass file permissions and read arbitrary files, possibly leading to a privilege escalation.</p> https://vulnerability.circl.lu/vuln/usn-2341-1