CVE-2010-2431

Description

The cupsFileOpen function in CUPS before 1.4.4 allows local users, with lp group membership, to overwrite arbitrary files via a symlink attack on the (1) /var/cache/cups/remote.cache or (2) /var/cache/cups/job.cache file.

How to fix CVE-2010-2431

To remediate CVE-2010-2431, upgrade the affected package to a fixed version below.

• Debian/cups—upgrade to 1.4.4-1 or later

Is CVE-2010-2431 being exploited?

Low — EPSS is 0.1%, meaning exploitation activity has not been observed at scale.

Affected packages (1)

• from 0, < 1.4.4-1

References (1)

• ADVISORYsecurity-tracker.debian.org/tracker/CVE-2010-2431