CWE Code: 59
Vulnerability Type: privilege_escalation
CVSS Score: 1.2
CWE Name:  Improper Link Resolution Before File Access ('Link Following')
Summary: lppasswd in cups before 1.7.1, when running with setuid privileges, allows local users to read portions of arbitrary files via a modified home environment variable and a symlink attack involving .cups/client.conf.
Access Authentication: NONE
Access Complexity: HIGH
Access Vector: LOCAL
Impact (C/I/A): PARTIAL/NONE/NONE
Published Date: 2014-01-26
Last Modified Date: 2014-03-06