The _cupsGetlang function, as used by lppasswd.c in lppasswd in CUPS 1.2.2, 1.3.7, 1.3.9, and 1.4.1, relies on an environment variable to determine the file that provides localized message strings, which allows local users to gain privileges via a file that contains crafted localization data with format string specifiers.
References
Configurations
Configuration 1 (hide)
|
Information
Published : 2010-03-05 11:30
Updated : 2013-05-14 20:06
NVD link : CVE-2010-0393
Mitre link : CVE-2010-0393
JSON object : View
CWE
CWE-264
Permissions, Privileges, and Access Controls
Products Affected
apple
- cups