« Volver al listado

CVE-2014-5031

Estado: ModificadaMedia (5)—

The web interface in CUPS before 2.0 does not check that files have world-readable permissions, which allows remote attackers to obtains sensitive information via unspecified vectors.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (2)

Apple — CupsCanonical — Ubuntu Linux

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2014-5031",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 5,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N",
          "authentication": "NONE",
          "integrityImpact": "NONE",
          "accessComplexity": "LOW",
          "availabilityImpact": "NONE",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 2.9,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "security@debian.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2014-07-29T14:55:07.877",
  "references": [
    {
      "url": "http://advisories.mageia.org/MGASA-2014-0313.html",
      "source": "security@debian.org"
    },
    {
      "url": "http://rhn.redhat.com/errata/RHSA-2014-1388.html",
      "source": "security@debian.org"
    },
    {
      "url": "http://secunia.com/advisories/60509",
      "source": "security@debian.org"
    },
    {
      "url": "http://secunia.com/advisories/60787",
      "source": "security@debian.org"
    },
    {
      "url": "http://www.debian.org/security/2014/dsa-2990",
      "source": "security@debian.org"
    },
    {
      "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2015:108",
      "source": "security@debian.org"
    },
    {
      "url": "http://www.openwall.com/lists/oss-security/2014/07/22/13",
      "source": "security@debian.org"
    },
    {
      "url": "http://www.openwall.com/lists/oss-security/2014/07/22/2",
      "source": "security@debian.org"
    },
    {
      "url": "http://www.ubuntu.com/usn/USN-2341-1",
      "source": "security@debian.org"
    },
    {
      "url": "https://cups.org/str.php?L4455",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "security@debian.org"
    },
    {
      "url": "http://advisories.mageia.org/MGASA-2014-0313.html",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://rhn.redhat.com/errata/RHSA-2014-1388.html",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://secunia.com/advisories/60509",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://secunia.com/advisories/60787",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.debian.org/security/2014/dsa-2990",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2015:108",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.openwall.com/lists/oss-security/2014/07/22/13",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.openwall.com/lists/oss-security/2014/07/22/2",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.ubuntu.com/usn/USN-2341-1",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://cups.org/str.php?L4455",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-264"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "The web interface in CUPS before 2.0 does not check that files have world-readable permissions, which allows remote attackers to obtains sensitive information via unspecified vectors."
    },
    {
      "lang": "es",
      "value": "La interfaz web en CUPS anterior a 2.0 no comprueba que los ficheros tienen permisos de lectura universal, lo que permite a atacantes remotos obtener información sensible a través de vectores no especificados."
    }
  ],
  "lastModified": "2026-06-17T00:10:57.370",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:apple:cups:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "FB6B5B62-D4D1-410D-AF80-0855B6D6A2D1",
              "versionEndIncluding": "1.7.4"
            },
            {
              "criteria": "cpe:2.3:a:apple:cups:1.7:rc1:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "055893FF-4833-4BDC-9C6B-B4BDD0F59942"
            },
            {
              "criteria": "cpe:2.3:a:apple:cups:1.7.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "F911CF9B-673B-4783-BE33-1D233F75BC1B"
            },
            {
              "criteria": "cpe:2.3:a:apple:cups:1.7.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "FAD0A09C-DCE7-4873-AC60-68EC747BD1F5"
            },
            {
              "criteria": "cpe:2.3:a:apple:cups:1.7.1:b1:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "54164748-5511-4B90-BD1B-75C0D89532A3"
            },
            {
              "criteria": "cpe:2.3:a:apple:cups:1.7.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "C950144A-DAAB-4E2E-84A6-9C356CDC8EAC"
            },
            {
              "criteria": "cpe:2.3:a:apple:cups:1.7.3:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "9741201D-2223-4593-8463-A0FE313F26F4"
            }
          ],
          "operator": "OR"
        }
      ]
    },
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:canonical:ubuntu_linux:10.04:*:*:*:lts:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "5D37DF0F-F863-45AC-853A-3E04F9FEC7CA"
            },
            {
              "criteria": "cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "B6B7CAD7-9D4E-4FDB-88E3-1E583210A01F"
            },
            {
              "criteria": "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "B5A6F2F3-4894-4392-8296-3B8DD2679084"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "security@debian.org"
}