https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 17:41:10 +0000 https://vulnerability.circl.lu/vuln/cve-2014-5030 <p>CUPS before 2.0 allows local users to read arbitrary files via a symlink attack on (1) index.html, (2) index.class, (3) index.pl, (4) index.php, (5) index.pyc, or (6) index.py.</p> <p>CUPS before 2.0 allows local users to read arbitrary files via a symlink attack on (1) index.html, (2) index.class, (3) index.pl, (4) index.php, (5) index.pyc, or (6) index.py.</p> https://vulnerability.circl.lu/vuln/cve-2014-5030 https://vulnerability.circl.lu/vuln/usn-2341-1 <p><strong>Affected:</strong> Ubuntu:14.04:LTS: cups</p> <p>Salvatore Bonaccorso discovered that the CUPS web interface incorrectly validated permissions and incorrectly handled symlinks. An attacker could possibly use this issue to bypass file permissions and read arbitrary files, possibly leading to a privilege escalation.</p> <p><strong>Affected:</strong> Ubuntu:14.04:LTS: cups</p> <p>Salvatore Bonaccorso discovered that the CUPS web interface incorrectly validated permissions and incorrectly handled symlinks. An attacker could possibly use this issue to bypass file permissions and read arbitrary files, possibly leading to a privilege escalation.</p> https://vulnerability.circl.lu/vuln/usn-2341-1