OKI Multiple CUPS Printer Drivers Multiple Insecure Temporary File Creation Vulnerabilities
BID:55583
Info
OKI Multiple CUPS Printer Drivers Multiple Insecure Temporary File Creation Vulnerabilities
| Bugtraq ID: | 55583 |
| Class: | Design Error |
| CVE: | |
| Remote: | No |
| Local: | Yes |
| Published: | Sep 18 2012 12:00AM |
| Updated: | Sep 18 2012 12:00AM |
| Credit: | Guido Berhoerster |
| Vulnerable: | |
| Not Vulnerable: | |
Discussion
OKI Multiple CUPS Printer Drivers Multiple Insecure Temporary File Creation Vulnerabilities
Multiple CUPS drivers for OKI printers are prone to multiple insecure temporary file-creation vulnerabilities.
An attacker with local access could potentially exploit these issues to perform symbolic-link attacks. Successfully mounting a symlink attack may allow the attacker to create or overwrite sensitive files in the context of the affected application or gain access to sensitive information. Other attacks may also be possible.
Multiple CUPS drivers for OKI printers are prone to multiple insecure temporary file-creation vulnerabilities.
An attacker with local access could potentially exploit these issues to perform symbolic-link attacks. Successfully mounting a symlink attack may allow the attacker to create or overwrite sensitive files in the context of the affected application or gain access to sensitive information. Other attacks may also be possible.
Exploit / POC
OKI Multiple CUPS Printer Drivers Multiple Insecure Temporary File Creation Vulnerabilities
An attacker can use readily available commands to exploit these issues.
An attacker can use readily available commands to exploit these issues.
Solution / Fix
OKI Multiple CUPS Printer Drivers Multiple Insecure Temporary File Creation Vulnerabilities
Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
References
OKI Multiple CUPS Printer Drivers Multiple Insecure Temporary File Creation Vulnerabilities
References:
References: