CVE-2012-5519: High severity cups vulnerability
CUPS 1.4.4, when running in certain Linux distributions such as Debian GNU/Linux, stores the web interface administrator key in /var/run/cups/certs/0 using certain permissions, which allows local users in the lpadmin group to read or write arbitrary files as root by leveraging the web interface.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2012-5519?
CVE-2012-5519 is considered to have high severity due to its potential for local privilege escalation.
How do I fix CVE-2012-5519?
To fix CVE-2012-5519, ensure proper file permissions on /var/run/cups/certs/0 and restrict access to the lpadmin group.
Who is affected by CVE-2012-5519?
CVE-2012-5519 affects systems running CUPS 1.4.4, particularly on specific Linux distributions like Debian.
What kind of attack does CVE-2012-5519 facilitate?
CVE-2012-5519 allows local users in the lpadmin group to read or write arbitrary files with root privileges through the CUPS web interface.
Is there a workaround for CVE-2012-5519?
A potential workaround for CVE-2012-5519 is to temporarily disable the CUPS web interface or limit group memberships.