CVE-2010-2431
The cupsFileOpen function in CUPS before 1.4.4 allows local users, with lp group membership, to...
The cupsFileOpen function in CUPS before 1.4.4 allows local users, with lp group membership, to overwrite arbitrary files via a symlink attack on the (1) /var/cache/cups/remote.cache or (2) /var/cache/cups/job.cache file.
Exploit likelihood
What each source reports
NVD Score used
The cupsFileOpen function in CUPS before 1.4.4 allows local users, with lp group membership, to overwrite arbitrary files via a symlink attack on the (1) /var/cache/cups/remote.cache or (2) /var/cache/cups/job.cache file.
- Record
CVE-2010-2431- CVSS 2.0
- 2.6 Low
AV:L/AC:H/Au:N/C:N/I:P/A:P - Weakness
- CWE-59
- Updated
- 2026-11-02
CVE List No score
The cupsFileOpen function in CUPS before 1.4.4 allows local users, with lp group membership, to overwrite arbitrary files via a symlink attack on the (1) /var/cache/cups/remote.cache or (2) /var/cache/cups/job.cache file.
- Record
CVE-2010-2431- Updated
- 2026-11-02
EUVDEUVD-2010-2440 No score
The cupsFileOpen function in CUPS before 1.4.4 allows local users, with lp group membership, to overwrite arbitrary files via a symlink attack on the (1) /var/cache/cups/remote.cache or (2) /var/cache/cups/job.cache file.
- Record
EUVD-2010-2440- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-q362-8vfv-xw4c No score
The cupsFileOpen function in CUPS before 1.4.4 allows local users, with lp group membership, to...
The cupsFileOpen function in CUPS before 1.4.4 allows local users, with lp group membership, to overwrite arbitrary files via a symlink attack on the (1) /var/cache/cups/remote.cache or (2) /var/cache/cups/job.cache file.
- Record
GHSA-q362-8vfv-xw4c- Weakness
- CWE-59
- Updated
- 2026-11-02
OSV No score
The cupsFileOpen function in CUPS before 1.4.4 allows local users, with lp group membership, to overwrite arbitrary files via a symlink attack on the (1) /var/cache/cups/remote.cache or (2) /var/cache/cups/job.cache file.
- Record
CVE-2010-2431- Updated
- 2026-11-02
OSVDEBIAN-CVE-2010-2431 No score
The cupsFileOpen function in CUPS before 1.4.4 allows local users, with lp group membership, to overwrite arbitrary files via a symlink attack on the (1) /var/cache/cups/remote.cache or (2) /var/cache/cups/job.cache file.
- Record
DEBIAN-CVE-2010-2431- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
cupsDebian:12 |
before 1.4.4-1 | 1.4.4-1 |
cupsDebian:13 |
before 1.4.4-1 | 1.4.4-1 |
cupsDebian:14 |
before 1.4.4-1 | 1.4.4-1 |
cupsDebian:5.0 From an advisory covering 8 CVEs |
before 1.3.8-1+lenny9, plus listed versions 1.3.8-1+lenny61.3.8-1+lenny71.3.8-1+lenny81.3.8-1lenny4.11.3.8-1lenny5 |
1.3.8-1+lenny9 |
cupsRed Hat:enterprise_linux:5::client_workstation From an advisory covering 2 CVEs |
before 1:1.3.7-18.el5_5.8 | 1:1.3.7-18.el5_5.8 |
cups-debuginfoRed Hat:enterprise_linux:5::client_workstation From an advisory covering 2 CVEs |
before 1:1.3.7-18.el5_5.8 | 1:1.3.7-18.el5_5.8 |
cups-develRed Hat:enterprise_linux:5::client_workstation From an advisory covering 2 CVEs |
before 1:1.3.7-18.el5_5.8 | 1:1.3.7-18.el5_5.8 |
cupsRed Hat:enterprise_linux:5::client From an advisory covering 2 CVEs |
before 1:1.3.7-18.el5_5.8 | 1:1.3.7-18.el5_5.8 |
cups-debuginfoRed Hat:enterprise_linux:5::client From an advisory covering 2 CVEs |
before 1:1.3.7-18.el5_5.8 | 1:1.3.7-18.el5_5.8 |
cups-libsRed Hat:enterprise_linux:5::client From an advisory covering 2 CVEs |
before 1:1.3.7-18.el5_5.8 | 1:1.3.7-18.el5_5.8 |
Show 6 moreShow less
| Package | Affected | Fixed |
|---|---|---|
cups-lpdRed Hat:enterprise_linux:5::client From an advisory covering 2 CVEs |
before 1:1.3.7-18.el5_5.8 | 1:1.3.7-18.el5_5.8 |
cupsRed Hat:enterprise_linux:5::server From an advisory covering 2 CVEs |
before 1:1.3.7-18.el5_5.8 | 1:1.3.7-18.el5_5.8 |
cups-debuginfoRed Hat:enterprise_linux:5::server From an advisory covering 2 CVEs |
before 1:1.3.7-18.el5_5.8 | 1:1.3.7-18.el5_5.8 |
cups-develRed Hat:enterprise_linux:5::server From an advisory covering 2 CVEs |
before 1:1.3.7-18.el5_5.8 | 1:1.3.7-18.el5_5.8 |
cups-libsRed Hat:enterprise_linux:5::server From an advisory covering 2 CVEs |
before 1:1.3.7-18.el5_5.8 | 1:1.3.7-18.el5_5.8 |
cups-lpdRed Hat:enterprise_linux:5::server From an advisory covering 2 CVEs |
before 1:1.3.7-18.el5_5.8 | 1:1.3.7-18.el5_5.8 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2010-2431 is a low vulnerability (CVSS 2.6) in Apple Cups, published June 22, 2010. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.36%, the 29th percentile. Fixed in cups 1.4.4-1.
References
mandriva.com/security/advisories?name=MDVSA-2010:234
rhn.redhat.com/errata/RHSA-2010-0811.html
cups.org/articles.php?L596
vupen.com/english/advisories/2010/2856
debian.org/security/2011/dsa-2176
Show 17 moreShow less
security.gentoo.org/glsa/glsa-201207-10.xml
bugzilla.redhat.com/show_bug.cgi?id=605397
secunia.com/advisories/43521
nvd.nist.gov/vuln/detail/CVE-2010-2431
github.com/advisories/GHSA-q362-8vfv-xw4c
security-tracker.debian.org/tracker/CVE-2010-2431
access.redhat.com/errata/RHSA-2010:0811
security.access.redhat.com/data/csaf/v2/advisories/2010/rhsa-2010_0811.json
cve.org/CVERecord?id=CVE-2010-2431