tocsin

Debian/cups: unknown

The web interface (cgi-bin/admin.c) in CUPS before 1.3.8 uses the guest username when a user is not logged on to the web server, which makes it easier for remote attackers to bypass intended policy an

Action: Upgrade cups to 1.3.8-1 or later.

Affected

introducedfixedlast affected
01.3.8-1-

Fixed versions

1.3.8-1

Sources

published · modified · JSON