CVE-2014-4338

cups-browsed in cups-filters before 1.0.53 allows remote attackers to bypass intended access restrictions in opportunistic circumstances by leveraging a malformed cups-browsed.conf BrowseAllow directive that is interpreted as granting browse access to all IP addresses.

CVSS v2.0

4.0 MEDIUMAV:N/AC:H/Au:N/C:P/I:P/A:N

EPSS

3.01% chance of exploitation in the next 30 days, 86th percentile

Published

2014-06-22

Updated

2024-08-06

Proof-of-concept exploits (2)

• http://openwall.com/lists/oss-security/2014/04/25/7
• http://openwall.com/lists/oss-security/2014/06/19/12

References

• CVE Record
• NVD entry

Related

• CVE-2014-4337
• CVE-2014-4377
• CVE-2014-4336
• CVE-2014-4378
• CVE-2014-4334
• CVE-2014-4404