CVE-2013-6891
lppasswd in CUPS before 1.7.1, when running with setuid privileges, allows local users to read...
lppasswd in CUPS before 1.7.1, when running with setuid privileges, allows local users to read portions of arbitrary files via a modified HOME environment variable and a symlink attack involving .cups/client.conf.
Exploit likelihood
What each source reports
NVD Score used
lppasswd in CUPS before 1.7.1, when running with setuid privileges, allows local users to read portions of arbitrary files via a modified HOME environment variable and a symlink attack involving .cups/client.conf.
- Record
CVE-2013-6891- CVSS 2.0
- 1.2 Low
AV:L/AC:H/Au:N/C:P/I:N/A:N - Weakness
- CWE-59
- Updated
- 2026-11-02
CVE ListNo score
lppasswd in CUPS before 1.7.1, when running with setuid privileges, allows local users to read portions of arbitrary files via a modified HOME environment variable and a symlink attack involving .cups/client.conf.
- Record
CVE-2013-6891- Updated
- 2026-11-02
EUVDEUVD-2013-6693No score
lppasswd in CUPS before 1.7.1, when running with setuid privileges, allows local users to read portions of arbitrary files via a modified HOME environment variable and a symlink attack involving .cups/client.conf.
- Record
EUVD-2013-6693- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-r8jg-q736-v263No score
lppasswd in CUPS before 1.7.1, when running with setuid privileges, allows local users to read...
lppasswd in CUPS before 1.7.1, when running with setuid privileges, allows local users to read portions of arbitrary files via a modified HOME environment variable and a symlink attack involving .cups/client.conf.
- Record
GHSA-r8jg-q736-v263- Weakness
- CWE-59
- Updated
- 2026-11-02
OSVNo score
lppasswd in CUPS before 1.7.1, when running with setuid privileges, allows local users to read portions of arbitrary files via a modified HOME environment variable and a symlink attack involving .cups/client.conf.
- Record
CVE-2013-6891- Updated
- 2026-11-02
OSVDEBIAN-CVE-2013-6891No score
lppasswd in CUPS before 1.7.1, when running with setuid privileges, allows local users to read portions of arbitrary files via a modified HOME environment variable and a symlink attack involving .cups/client.conf.
- Record
DEBIAN-CVE-2013-6891- Updated
- 2026-11-02
OSVMGASA-2014-0021No score
Updated cups packages fix a security vulverability
Updated cups packages fix security vulnerability:
Jann Horn discovered that the CUPS lppasswd tool incorrectly read a user configuration file in certain configurations. A local attacker could use this to read sensitive information from certain files, bypassing access restrictions (CVE-2013-6891).
- Record
MGASA-2014-0021- Updated
- 2026-11-02
Affected products
Affected packages
History
| Recorded | Changed | Sources |
|---|---|---|
| facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2013-6891 is a low vulnerability (CVSS 1.2) in Apple Cups, published January 21, 2014. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.45%, the 39th percentile. Fixed in cups 1.7.1-1.