CVE-2013-6891

N/A Unknown

Published: January 26, 2014 Modified: April 29, 2026

Description

lppasswd in CUPS before 1.7.1, when running with setuid privileges, allows local users to read portions of arbitrary files via a modified HOME environment variable and a symlink attack involving .cups/client.conf.

AI Explanation

Get an AI-powered plain-language explanation of this vulnerability and remediation steps.

References to Advisories, Solutions, and Tools

Patch Vendor Advisory Exploit Third Party Advisory

http://advisories.mageia.org/MGASA-2014-0021.html

Source: cve@mitre.org

http://secunia.com/advisories/56531

Source: cve@mitre.org

Vendor Advisory

http://www.cups.org/blog.php?L704

Source: cve@mitre.org

http://www.cups.org/str.php?L4319

Source: cve@mitre.org

Exploit Patch

http://www.mandriva.com/security/advisories?name=MDVSA-2014:015

Source: cve@mitre.org

http://www.ubuntu.com/usn/USN-2082-1

Source: cve@mitre.org

http://advisories.mageia.org/MGASA-2014-0021.html