The web interface in CUPS before 2.0 does not check that files have world-readable permissions, which allows remote attackers to obtains sensitive information via unspecified vectors.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Cups | Apple | * | 1.7.4 (including) |
| Cups | Apple | 1.7-rc1 (including) | 1.7-rc1 (including) |
| Cups | Apple | 1.7.0 (including) | 1.7.0 (including) |
| Cups | Apple | 1.7.1 (including) | 1.7.1 (including) |
| Cups | Apple | 1.7.1-b1 (including) | 1.7.1-b1 (including) |
| Cups | Apple | 1.7.2 (including) | 1.7.2 (including) |
| Cups | Apple | 1.7.3 (including) | 1.7.3 (including) |
| Red Hat Enterprise Linux 6 | RedHat | cups-1:1.4.2-67.el6 | * |
| Red Hat Enterprise Linux 7 | RedHat | cups-1:1.6.3-17.el7 | * |
| Cups | Ubuntu | lucid | * |
| Cups | Ubuntu | precise | * |
| Cups | Ubuntu | trusty | * |
| Cups | Ubuntu | upstream | * |