cups 'systemv/lppasswd.c' Local Privilege Escalation Vulnerability
BID:64985
Info
cups 'systemv/lppasswd.c' Local Privilege Escalation Vulnerability
| Bugtraq ID: | 64985 |
| Class: | Design Error |
| CVE: |
CVE-2013-6891 |
| Remote: | No |
| Local: | Yes |
| Published: | Dec 19 2013 12:00AM |
| Updated: | May 19 2014 12:52AM |
| Credit: | Jann Horn |
| Vulnerable: |
MandrakeSoft Enterprise Server 5 x86_64 MandrakeSoft Enterprise Server 5 |
| Not Vulnerable: | |
Discussion
cups 'systemv/lppasswd.c' Local Privilege Escalation Vulnerability
Cups is prone to a local privilege-escalation vulnerability.
Local attackers can exploit this issue to gain elevated privileges on affected computers.
Cups is prone to a local privilege-escalation vulnerability.
Local attackers can exploit this issue to gain elevated privileges on affected computers.
Exploit / POC
cups 'systemv/lppasswd.c' Local Privilege Escalation Vulnerability
Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution / Fix
cups 'systemv/lppasswd.c' Local Privilege Escalation Vulnerability
Solution:
Updates are available. Please see the references or vendor advisory for more information.
MandrakeSoft Enterprise Server 5
Mandriva Business Server 1 X86 64
MandrakeSoft Enterprise Server 5 x86_64
Solution:
Updates are available. Please see the references or vendor advisory for more information.
MandrakeSoft Enterprise Server 5
-
Mandriva cups-1.3.10-0.7mdvmes5.2.i586.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva cups-common-1.3.10-0.7mdvmes5.2.i586.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva cups-serial-1.3.10-0.7mdvmes5.2.i586.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva libcups2-1.3.10-0.7mdvmes5.2.i586.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva libcups2-devel-1.3.10-0.7mdvmes5.2.i586.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva php-cups-1.3.10-0.7mdvmes5.2.i586.rpm
http://www.mandriva.com/en/downloads/
Mandriva Business Server 1 X86 64
-
Mandriva cups-1.5.4-1.3.mbs1.x86_64.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva cups-common-1.5.4-1.3.mbs1.x86_64.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva cups-serial-1.5.4-1.3.mbs1.x86_64.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva lib64cups2-1.5.4-1.3.mbs1.x86_64.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva lib64cups2-devel-1.5.4-1.3.mbs1.x86_64.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva php-cups-1.5.4-1.3.mbs1.x86_64.rpm
http://www.mandriva.com/en/downloads/
MandrakeSoft Enterprise Server 5 x86_64
-
Mandriva cups-1.3.10-0.7mdvmes5.2.x86_64.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva cups-common-1.3.10-0.7mdvmes5.2.x86_64.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva cups-serial-1.3.10-0.7mdvmes5.2.x86_64.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva lib64cups2-1.3.10-0.7mdvmes5.2.x86_64.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva lib64cups2-devel-1.3.10-0.7mdvmes5.2.x86_64.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva php-cups-1.3.10-0.7mdvmes5.2.x86_64.rpm
http://www.mandriva.com/en/downloads/
References
cups 'systemv/lppasswd.c' Local Privilege Escalation Vulnerability
References:
References:
- CUPS Vendor Page (CUPS)