VulnerabilityModified
CVE-2009-0032
CUPS on Mandriva Linux 2008.0, 2008.1, 2009.0, Corporate Server (CS) 3.0 and 4.0, and Multi Network Firewall (MNF) 2.0 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/pdf.log temporary file.
MEDIUM 6.9EPSS 0.36%
Does this matter?
Lower severity and a low EPSS score (0.36%). Track it; it rarely justifies an emergency change on its own.
Description
CUPS on Mandriva Linux 2008.0, 2008.1, 2009.0, Corporate Server (CS) 3.0 and 4.0, and Multi Network Firewall (MNF) 2.0 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/pdf.log temporary file.
- CVSS 2.0
- 6.9 MEDIUMAV:L/AC:M/Au:N/C:C/I:C/A:C
- EPSS
- 0.36% probability · 29th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-59
- Affected
- apple/cups
- Source
- secalert@redhat.com
References
- http://securitytracker.com/id?1021637
- http://www.mandriva.com/security/advisories?name=MDVSA-2009:027Vendor Advisory
- http://www.mandriva.com/security/advisories?name=MDVSA-2009:028
- http://www.mandriva.com/security/advisories?name=MDVSA-2009:029Vendor Advisory
- http://www.securityfocus.com/bid/33418
- https://exchange.xforce.ibmcloud.com/vulnerabilities/48210
- http://securitytracker.com/id?1021637
- http://www.mandriva.com/security/advisories?name=MDVSA-2009:027Vendor Advisory
- http://www.mandriva.com/security/advisories?name=MDVSA-2009:028
- http://www.mandriva.com/security/advisories?name=MDVSA-2009:029Vendor Advisory
- http://www.securityfocus.com/bid/33418
- https://exchange.xforce.ibmcloud.com/vulnerabilities/48210
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.