CVE-2013-6891
lppasswd in CUPS before 1.7.1, when running with setuid privileges, allows local users to read...
lppasswd in CUPS before 1.7.1, when running with setuid privileges, allows local users to read portions of arbitrary files via a modified HOME environment variable and a symlink attack involving .cups/client.conf.
Exploit likelihood
What each source reports
NVD Score used
lppasswd in CUPS before 1.7.1, when running with setuid privileges, allows local users to read portions of arbitrary files via a modified HOME environment variable and a symlink attack involving .cups/client.conf.
- Record
CVE-2013-6891- CVSS 2.0
- 1.2 Low
AV:L/AC:H/Au:N/C:P/I:N/A:N - Weakness
- CWE-59
- Updated
- 2026-11-02
CVE List No score
lppasswd in CUPS before 1.7.1, when running with setuid privileges, allows local users to read portions of arbitrary files via a modified HOME environment variable and a symlink attack involving .cups/client.conf.
- Record
CVE-2013-6891- Updated
- 2026-11-02
EUVDEUVD-2013-6693 No score
lppasswd in CUPS before 1.7.1, when running with setuid privileges, allows local users to read portions of arbitrary files via a modified HOME environment variable and a symlink attack involving .cups/client.conf.
- Record
EUVD-2013-6693- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-r8jg-q736-v263 No score
lppasswd in CUPS before 1.7.1, when running with setuid privileges, allows local users to read...
lppasswd in CUPS before 1.7.1, when running with setuid privileges, allows local users to read portions of arbitrary files via a modified HOME environment variable and a symlink attack involving .cups/client.conf.
- Record
GHSA-r8jg-q736-v263- Weakness
- CWE-59
- Updated
- 2026-11-02
OSV No score
lppasswd in CUPS before 1.7.1, when running with setuid privileges, allows local users to read portions of arbitrary files via a modified HOME environment variable and a symlink attack involving .cups/client.conf.
- Record
CVE-2013-6891- Updated
- 2026-11-02
OSVDEBIAN-CVE-2013-6891 No score
lppasswd in CUPS before 1.7.1, when running with setuid privileges, allows local users to read portions of arbitrary files via a modified HOME environment variable and a symlink attack involving .cups/client.conf.
- Record
DEBIAN-CVE-2013-6891- Updated
- 2026-11-02
OSVMGASA-2014-0021 No score
Updated cups packages fix a security vulverability
Updated cups packages fix security vulnerability:
Jann Horn discovered that the CUPS lppasswd tool incorrectly read a user configuration file in certain configurations. A local attacker could use this to read sensitive information from certain files, bypassing access restrictions (CVE-2013-6891).
- Record
MGASA-2014-0021- Updated
- 2026-11-02
Affected products
Affected packages
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2013-6891 is a low vulnerability (CVSS 1.2) in Apple Cups, published January 21, 2014. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.45%, the 38th percentile. Fixed in cups 1.7.1-1.