CVE-2014-4338
Title: Linuxfoundation Cups-Filters
Other
Proof Of Concept
No public PoC currently indexed for CVE-2014-4338.
CWE Category
CWE-264
Published Date
Jun 22, 2014
Modified Date
May 06, 2026
Exploit Status
Not Found
Score
4.0
CVSS v2.0
Exploit Probability (EPSS)
0.39%
Vulnerability Summary
CVE-2014-4338: cups-browsed in cups-filters before 1.0.53 allows remote attackers to bypass intended access restrictions in opportunistic circumstances by leveraging a malformed cups-browsed.conf BrowseAllow directive that is interpreted as granting browse access to all IP addresses.
Impacted Vendors
Reference Links
http://openwall.com/lists/oss-security/2014/04/25/7
http://openwall.com/lists/oss-security/2014/06/19/12
http://rhn.redhat.com/errata/RHSA-2014-1795.html
http://secunia.com/advisories/62044
http://www.securityfocus.com/bid/68124
https://bugs.linuxfoundation.org/show_bug.cgi?id=1204
http://openwall.com/lists/oss-security/2014/04/25/7
http://openwall.com/lists/oss-security/2014/06/19/12
http://rhn.redhat.com/errata/RHSA-2014-1795.html
http://secunia.com/advisories/62044
http://www.securityfocus.com/bid/68124
https://bugs.linuxfoundation.org/show_bug.cgi?id=1204
CVSS v2.0
Source Entity
[email protected]
Severity
MEDIUM
4.0
Access Vector
N/A
Authentication
N/A
RAW VECTOR
AV:N/AC:H/Au:N/C:P/I:P/A:N
Associated Attack Patterns (CAPEC)
Total: PatternsNo specific attack patterns mapped.
Likelihood
Severity
Page /
CVE-2014-4338 Exploits & PoCs (Proof Of Concept)
No public PoCs found in our database for this CVE.
MODIFIED
Vulnerability data updated via NVD.
MODIFIED
Vulnerability data updated via NVD.
MODIFIED
Vulnerability data or affected products updated.
PUBLISHED
Vulnerability first announced in NVD.
Attack Vector Matrix
Access Vector
N/A
Complexity
N/A
Privileges
N/A
Interaction
NONE
CVSS Vector String
AV:N/AC:H/Au:N/C:P/I:P/A:N
Affected Stack
No specific products linked.