https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 00:21:32 +0000 https://vulnerability.circl.lu/vuln/cve-2014-5031 <p>The web interface in CUPS before 2.0 does not check that files have world-readable permissions, which allows remote attackers to obtains sensitive information via unspecified vectors.</p> <p>The web interface in CUPS before 2.0 does not check that files have world-readable permissions, which allows remote attackers to obtains sensitive information via unspecified vectors.</p> https://vulnerability.circl.lu/vuln/cve-2014-5031 https://vulnerability.circl.lu/vuln/usn-2341-1 <p><strong>Affected:</strong> Ubuntu:14.04:LTS: cups</p> <p>Salvatore Bonaccorso discovered that the CUPS web interface incorrectly validated permissions and incorrectly handled symlinks. An attacker could possibly use this issue to bypass file permissions and read arbitrary files, possibly leading to a privilege escalation.</p> <p><strong>Affected:</strong> Ubuntu:14.04:LTS: cups</p> <p>Salvatore Bonaccorso discovered that the CUPS web interface incorrectly validated permissions and incorrectly handled symlinks. An attacker could possibly use this issue to bypass file permissions and read arbitrary files, possibly leading to a privilege escalation.</p> https://vulnerability.circl.lu/vuln/usn-2341-1