Vulnerability Report

CVE-2010-2431

Title: Apple Cups

Other

Proof Of Concept

No public PoC currently indexed for CVE-2010-2431.

CWE Category CWE-59

Published Date Jun 22, 2010

Modified Date Apr 29, 2026

Exploit Status Not Found

Score 2.6 CVSS v2.0

Exploit Probability (EPSS)

0.06%

Vulnerability Summary

CVE-2010-2431: The cupsFileOpen function in CUPS before 1.4.4 allows local users, with lp group membership, to overwrite arbitrary files via a symlink attack on the (1) /var/cache/cups/remote.cache or (2) /var/cache/cups/job.cache file.

Impacted Vendors

easy_software_products 1

apple 1

Reference Links

http://cups.org/articles.php?L596 http://cups.org/str.php?L3510 http://rhn.redhat.com/errata/RHSA-2010-0811.html http://secunia.com/advisories/43521 http://security.gentoo.org/glsa/glsa-201207-10.xml http://www.debian.org/security/2011/dsa-2176 http://www.mandriva.com/security/advisories?name=MDVSA-2010:232 http://www.mandriva.com/security/advisories?name=MDVSA-2010:234 http://www.vupen.com/english/advisories/2010/2856 http://www.vupen.com/english/advisories/2011/0535 https://bugzilla.redhat.com/show_bug.cgi?id=605397 http://cups.org/articles.php?L596 http://cups.org/str.php?L3510 http://rhn.redhat.com/errata/RHSA-2010-0811.html http://secunia.com/advisories/43521 http://security.gentoo.org/glsa/glsa-201207-10.xml http://www.debian.org/security/2011/dsa-2176 http://www.mandriva.com/security/advisories?name=MDVSA-2010:232 http://www.mandriva.com/security/advisories?name=MDVSA-2010:234 http://www.vupen.com/english/advisories/2010/2856 http://www.vupen.com/english/advisories/2011/0535 https://bugzilla.redhat.com/show_bug.cgi?id=605397

CVSS v2.0

Source Entity [email protected]

Severity LOW

2.6

Access Vector

N/A

Authentication

N/A

RAW VECTOR AV:L/AC:H/Au:N/C:N/I:P/A:P

Associated Attack Patterns (CAPEC)

Total: Patterns

CVE-2010-2431 Exploits & PoCs (Proof Of Concept)

No public PoCs found in our database for this CVE.

April 29, 2026 MODIFIED

Vulnerability data updated via NVD.

April 11, 2025 MODIFIED

Vulnerability data or affected products updated.

June 22, 2010 PUBLISHED

Vulnerability first announced in NVD.

Attack Vector Matrix

Access Vector N/A

Complexity N/A

Privileges N/A

Interaction NONE

CVSS Vector String


                                    AV:L/AC:H/Au:N/C:N/I:P/A:P

Affected Stack

No specific products linked.