oss-sec mailing list archives

Re: Privilege escalation (lpadmin -> root) in cups

From: Yves-Alexis Perez <corsac () debian org>
Date: Sat, 10 Nov 2012 14:01:52 +0100

On sam., 2012-11-10 at 13:49 +0100, Yves-Alexis Perez wrote:

Hi,

a Debian user reported a bug in our BTS concerning cupsd. The bug is
available at http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=692791 and
upstream bug at http://www.cups.org/str.php?L4223 (restricted because
it's tagged security).

By the way, it seems that the CUPS security contact at
http://oss-security.openwall.org/wiki/software#cups doesn't work, I just
received a bounce. Does someone know a mail address to reach them?

Regards,
-- 
Yves-Alexis

Attachment: signature.asc
Description: This is a digitally signed message part

Current thread:

Privilege escalation (lpadmin -> root) in cups Yves-Alexis Perez (Nov 10)
- Re: Privilege escalation (lpadmin -> root) in cups Yves-Alexis Perez (Nov 10)
  - Re: Privilege escalation (lpadmin -> root) in cups Yves-Alexis Perez (Nov 11)
- Re: Privilege escalation (lpadmin -> root) in cups Kurt Seifried (Nov 10)
  - Re: Privilege escalation (lpadmin -> root) in cups Yves-Alexis Perez (Nov 11)
  - Re: Privilege escalation (lpadmin -> root) in cups Sean Amoss (Nov 13)