Unscored severity · published Nov 20, 2012
CVE-2012-5519
CUPS 1.4.4, when running in certain Linux distributions such as Debian GNU/Linux, stores the web interface administrator key in /var/run/cups/certs/0 using certain permissions,…
–
CVSS
2.1%
EPSS
No
On KEV
Description
CUPS 1.4.4, when running in certain Linux distributions such as Debian GNU/Linux, stores the web interface administrator key in /var/run/cups/certs/0 using certain permissions, which allows local users in the lpadmin group to read or write arbitrary files as root by leveraging the web interface.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.1% · higher than 82% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CU
Cups · Apple
1.4.4 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2012-5519
CVE.org
https://www.cve.org/CVERecord?id=CVE-2012-5519
Exploit
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=692791
lists.apple.com
http://lists.apple.com/archives/security-announce/2013/Jun/msg00000.html
lists.opensuse.org
http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00003.html
lists.opensuse.org
http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00006.html
lists.opensuse.org
http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00010.html
rhn.redhat.com
http://rhn.redhat.com/errata/RHSA-2013-0580.html
More from Cups
9.8
CVE-2012-6094
cups (Common Unix Printing System) 'Listen localhost:631' option not honored correctly which could provide unauthorized access to the system
9.8
CVE-2010-2941
ipp.c in cupsd in CUPS 1.4.4 and earlier does not properly allocate memory for attribute values with invalid string data types, which allows remote attackers to cause a denial of…
9.8
CVE-2004-2154
CUPS before 1.1.21rc1 treats a Location directive in cupsd.conf as case sensitive, which allows attackers to bypass intended ACLs via a printer name containing uppercase or…
7.5
CVE-2017-18190
A localhost.localdomain whitelist entry in valid_host() in scheduler/client.c in CUPS before 2.2.2 allows remote attackers to execute arbitrary IPP commands by sending POST…
7.5
CVE-2010-0302
Use-after-free vulnerability in the abstract file-descriptor handling interface in the cupsdDoSelect function in scheduler/select.c in the scheduler in cupsd in CUPS before 1.4.4,…