← back
CVE-2010-0393

CVE-2010-0393

EPSS 0.3%
The _cupsGetlang function, as used by lppasswd.c in lppasswd in CUPS 1.2.2, 1.3.7, 1.3.9, and 1.4.1, relies on an environment variable to determine the file that provides localized message strings, which allows local users to gain privileges via a file that contains crafted localization data with format string specifiers.
Affected products
n/a · n/a

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.htmlhttps://bugzilla.redhat.com/show_bug.cgi?id=558460http://security.gentoo.org/glsa/glsa-201207-10.xmlhttp://support.apple.com/kb/HT4077http://www.cups.org/str.php?L3482http://www.mandriva.com/security/advisories?name=MDVSA-2010:072http://www.mandriva.com/security/advisories?name=MDVSA-2010:073http://www.securityfocus.com/bid/38524http://www.ubuntu.com/usn/USN-906-1