| Package | Affected versions | Patched versions |
|---|---|---|
| cups | = 1.7= 1.7.1≤ 1.7.0 |
lppasswd in CUPS before 1.7.1, when running with setuid privileges, allows local users to read portions of arbitrary files via a modified HOME environment variable and a symlink attack involving .cups/client.conf.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free