REDHAT-BUG-558460: High severity cups libraries vulnerability

REDHAT-BUG-558460 is classified as a moderate vulnerability due to the risks associated with setuid binaries using environment variables.

You can fix REDHAT-BUG-558460 by upgrading to CUPS version 1.4.x or later, which addresses this vulnerability.

The affected systems include CUPS versions 1.3.x and earlier, which are susceptible to the described vulnerability.

The consequences of REDHAT-BUG-558460 may include unauthorized access and manipulation of system directories via exploited setuid binaries.

While a specific workaround is not detailed, it is advisable to limit the use of setuid binaries until an upgrade can be performed.

Published Jan 25, 2010

Updated

CUPS 1.3.x and earlier ships setuid binaries which use environment variables to set the directories in which they operate.

Affected Software

1 affected component

cups CUPS<=1.3.x

Jan 25, 2010

Data Sourced

via Red Hat·12:38 PM

DescriptionSeverityAffected Software

REDHAT-BUG-558460 is classified as a moderate vulnerability due to the risks associated with setuid binaries using environment variables.

You can fix REDHAT-BUG-558460 by upgrading to CUPS version 1.4.x or later, which addresses this vulnerability.

The affected systems include CUPS versions 1.3.x and earlier, which are susceptible to the described vulnerability.

The consequences of REDHAT-BUG-558460 may include unauthorized access and manipulation of system directories via exploited setuid binaries.

While a specific workaround is not detailed, it is advisable to limit the use of setuid binaries until an upgrade can be performed.