CVE-2014-3537: Low severity cups vulnerability
It was discovered that a local user with privileges of group=lp can write symbolic links in the rss directory and use that to gain '@SYSTEM' group privilege with cupsd.
Permissions:
drwxrwxr-x. 2 root lp 4096 Jul 2 09:58 /var/cache/cups/rss
SELinux mitigates this vulnerability
Other sources
The web interface in CUPS before 1.7.4 allows local users in the lp group to read arbitrary files via a symlink attack on a file in /var/cache/cups/rss/.
— MITRE
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2014-3537?
CVE-2014-3537 has a critical severity level due to the potential for a local user to gain elevated privileges.
How do I fix CVE-2014-3537?
To fix CVE-2014-3537, ensure that systems are updated to the latest version of CUPS that addresses this vulnerability.
Who is affected by CVE-2014-3537?
CVE-2014-3537 affects local users with group 'lp' privileges on specific versions of Apple CUPS and various Linux distributions.
Is SELinux protective against CVE-2014-3537?
Yes, SELinux mitigates the effects of CVE-2014-3537 by enforcing security policies.
What versions of CUPS are impacted by CVE-2014-3537?
CVE-2014-3537 impacts Apple CUPS versions up to 1.7.3 and specific Ubuntu and Fedora releases.