CUPS 1.4.4, when running in certain Linux distributions such as Debian GNU/Linux, stores the web interface administrator key in /var/run/cups/certs/0 using certain permissions, which allows local users in the lpadmin group to read or write arbitrary files as root by leveraging the web interface.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Cups | Apple | 1.4.4 (including) | 1.4.4 (including) |
| Debian_linux | Debian | * | * |
| Red Hat Enterprise Linux 5 | RedHat | cups-1:1.3.7-30.el5_9.3 | * |
| Red Hat Enterprise Linux 6 | RedHat | cups-1:1.4.2-50.el6_4.4 | * |
| Cups | Ubuntu | devel | * |
| Cups | Ubuntu | lucid | * |
| Cups | Ubuntu | oneiric | * |
| Cups | Ubuntu | precise | * |
| Cups | Ubuntu | quantal | * |
| Cupsys | Ubuntu | hardy | * |