CUPS symbolic links vulnerability
Published:		28.01.2009
Source:		BUGTRAQ
SecurityVulns ID:		9623
Type:		local
Level:		6/10
Description:		Insecure /tmp/pdf.log file creation.

Affected:		CUPS : cups 1.3
CVE:		CVE-2009-0032 (CUPS on Mandriva Linux 2008.0, 2008.1, 2009.0, Corporate Server (CS) 3.0 and 4.0, and Multi Network Firewall (MNF) 2.0 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/pdf.log temporary file.)

Original document

MANDRIVA, [ MDVSA-2009:027 ] cups (28.01.2009)

Discuss:

Read or add your comments to this news (0 comments)