Mend.io Vulnerability Database

What is a CVE vulnerability ID? icon What is a WS vulnerability ID? icon What is an MSC vulnerability ID? icon
New vulnerability? Tell us about it!
icon

We found results for “”

CVE-2011-2924

Date: November 19, 2019

foomatic-rip filter v4.0.12 and prior used insecurely creates temporary files for storage of PostScript data by rendering the data when the debug mode was enabled. This flaw may be exploited by a local attacker to conduct symlink attacks by overwriting arbitrary files accessible with the privileges of the user running the foomatic-rip universal print filter.

Severity Score

Related Resources (9)

https://launchpad.net/ubuntu/+source/foomatic-filters/4.0.12-1
https://lwn.net/Articles/459979/
https://www.openwall.com/lists/oss-security/2014/02/08/5/1
https://access.redhat.com/security/cve/cve-2011-2924
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2011-2924
https://nvd.nist.gov/vuln/detail/CVE-2011-2924
https://security-tracker.debian.org/tracker/CVE-2011-2924
https://access.redhat.com/security/cve/CVE-2011-2924
https://www.mend.io/vulnerability-database/CVE-2011-2924

Severity Score

Weakness Type (CWE)

Link Following

CWE-59

CVSS v3.1

Base Score:
Attack Vector (AV): LOCAL
Attack Complexity (AC): LOW
Privileges Required (PR): LOW
User Interaction (UI): NONE
Scope (S): UNCHANGED
Confidentiality (C): NONE
Integrity (I): HIGH
Availability (A): NONE

CVSS v2

Base Score:
Access Vector (AV): LOCAL
Access Complexity (AC): MEDIUM
Authentication (AU): NONE
Confidentiality (C): NONE
Integrity (I): PARTIAL
Availability (A): PARTIAL
Additional information:

Do you need more information?

Contact Us