Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2011-2924

foomatic-rip filter v4.0.12 and prior used insecurely creates temporary files for storage of PostScript data by rendering the data when the debug mode was enabled. This flaw may be exploited by a local attacker to conduct symlink attacks by overwriting arbitrary files accessible with the privileges of the user running the foomatic-rip universal print filter.

Published

2019-11-19T22:15:10.943

Last Modified

2024-11-21T01:29:17.300

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 5.5 (MEDIUM)

CVSSv2 Vector

AV:L/AC:M/Au:N/C:N/I:P/A:P

Access Vector: LOCAL
Access Complexity: MEDIUM
Authentication: NONE
Confidentiality Impact: NONE
Integrity Impact: PARTIAL
Availability Impact: PARTIAL

Exploitability Score

3.4

Impact Score

4.9

Weaknesses

Type: Primary
CWE-59

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Application	linuxfoundation	foomatic-filters	≤ 4.0.12	Yes
Operating System	debian	debian_linux	8.0	Yes
Operating System	debian	debian_linux	9.0	Yes
Operating System	debian	debian_linux	10.0	Yes
Operating System	fedoraproject	fedora	14	Yes
Operating System	fedoraproject	fedora	15	Yes

References

https://access.redhat.com/security/cve/cve-2011-2924 Third Party Advisory ([email protected])
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2011-2924 Issue Tracking, Third Party Advisory ([email protected])
https://launchpad.net/ubuntu/+source/foomatic-filters/4.0.12-1 Release Notes, Third Party Advisory ([email protected])
https://lwn.net/Articles/459979/ Third Party Advisory ([email protected])
https://security-tracker.debian.org/tracker/CVE-2011-2924 Third Party Advisory ([email protected])
https://www.openwall.com/lists/oss-security/2014/02/08/5/1 Mailing List, Third Party Advisory ([email protected])
https://access.redhat.com/security/cve/cve-2011-2924 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2011-2924 Issue Tracking, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://launchpad.net/ubuntu/+source/foomatic-filters/4.0.12-1 Release Notes, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://lwn.net/Articles/459979/ Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://security-tracker.debian.org/tracker/CVE-2011-2924 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://www.openwall.com/lists/oss-security/2014/02/08/5/1 Mailing List, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)