CVE-2012-5519
CUPS 1.4.4, when running in certain Linux distributions such as Debian GNU/Linux, stores the web...
CVE-2012-5519 is a high vulnerability (CVSS 7.2) in Apple Cups, published November 20, 2012. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 2.13%, the 82nd percentile. Fixed in cups 1.5.3-2.7.
- Severity
- 7.2 HighCVSS 2.0, NVD
- Exploit chance
- 2.13%EPSS, 82nd percentile
- Exploitation
- None known2 public exploits
- Fixed in
1.5.3-2.7cups +38 more
Description
CUPS 1.4.4, when running in certain Linux distributions such as Debian GNU/Linux, stores the web interface administrator key in /var/run/cups/certs/0 using certain permissions, which allows local users in the lpadmin group to read or write arbitrary files as root by leveraging the web interface.
Exploit likelihood
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
cupsDebian:12 | before 1.5.3-2.7 | 1.5.3-2.7 |
cupsDebian:13 | before 1.5.3-2.7 | 1.5.3-2.7 |
cupsDebian:14 | before 1.5.3-2.7 | 1.5.3-2.7 |
cupsDebian:6.0 | before 1.4.4-7+squeeze2, plus listed versions 1.4.4-71.4.4-7+squeeze1 | 1.4.4-7+squeeze2 |
cupsRed Hat:enterprise_linux:5::server | before 1:1.3.7-30.el5_9.3 | 1:1.3.7-30.el5_9.3 |
cups-debuginfoRed Hat:enterprise_linux:5::server | before 1:1.3.7-30.el5_9.3 | 1:1.3.7-30.el5_9.3 |
cups-develRed Hat:enterprise_linux:5::server | before 1:1.3.7-30.el5_9.3 | 1:1.3.7-30.el5_9.3 |
cups-libsRed Hat:enterprise_linux:5::server | before 1:1.3.7-30.el5_9.3 | 1:1.3.7-30.el5_9.3 |
cups-lpdRed Hat:enterprise_linux:5::server | before 1:1.3.7-30.el5_9.3 | 1:1.3.7-30.el5_9.3 |
cupsRed Hat:enterprise_linux:6::client | before 1:1.4.2-50.el6_4.4 | 1:1.4.2-50.el6_4.4 |
Show 29 moreShow less
| Package | Affected | Fixed |
|---|---|---|
cups-debuginfoRed Hat:enterprise_linux:6::client | before 1:1.4.2-50.el6_4.4 | 1:1.4.2-50.el6_4.4 |
cups-libsRed Hat:enterprise_linux:6::client | before 1:1.4.2-50.el6_4.4 | 1:1.4.2-50.el6_4.4 |
cups-lpdRed Hat:enterprise_linux:6::client | before 1:1.4.2-50.el6_4.4 | 1:1.4.2-50.el6_4.4 |
cups-develRed Hat:enterprise_linux:6::client | before 1:1.4.2-50.el6_4.4 | 1:1.4.2-50.el6_4.4 |
cups-phpRed Hat:enterprise_linux:6::client | before 1:1.4.2-50.el6_4.4 | 1:1.4.2-50.el6_4.4 |
cupsRed Hat:enterprise_linux:6::computenode | before 1:1.4.2-50.el6_4.4 | 1:1.4.2-50.el6_4.4 |
cups-debuginfoRed Hat:enterprise_linux:6::computenode | before 1:1.4.2-50.el6_4.4 | 1:1.4.2-50.el6_4.4 |
cups-libsRed Hat:enterprise_linux:6::computenode | before 1:1.4.2-50.el6_4.4 | 1:1.4.2-50.el6_4.4 |
cups-lpdRed Hat:enterprise_linux:6::computenode | before 1:1.4.2-50.el6_4.4 | 1:1.4.2-50.el6_4.4 |
cups-develRed Hat:enterprise_linux:6::computenode | before 1:1.4.2-50.el6_4.4 | 1:1.4.2-50.el6_4.4 |
cups-phpRed Hat:enterprise_linux:6::computenode | before 1:1.4.2-50.el6_4.4 | 1:1.4.2-50.el6_4.4 |
cupsRed Hat:enterprise_linux:6::server | before 1:1.4.2-50.el6_4.4 | 1:1.4.2-50.el6_4.4 |
cups-debuginfoRed Hat:enterprise_linux:6::server | before 1:1.4.2-50.el6_4.4 | 1:1.4.2-50.el6_4.4 |
cups-develRed Hat:enterprise_linux:6::server | before 1:1.4.2-50.el6_4.4 | 1:1.4.2-50.el6_4.4 |
cups-libsRed Hat:enterprise_linux:6::server | before 1:1.4.2-50.el6_4.4 | 1:1.4.2-50.el6_4.4 |
cups-lpdRed Hat:enterprise_linux:6::server | before 1:1.4.2-50.el6_4.4 | 1:1.4.2-50.el6_4.4 |
cups-phpRed Hat:enterprise_linux:6::server | before 1:1.4.2-50.el6_4.4 | 1:1.4.2-50.el6_4.4 |
cupsRed Hat:enterprise_linux:6::workstation | before 1:1.4.2-50.el6_4.4 | 1:1.4.2-50.el6_4.4 |
cups-debuginfoRed Hat:enterprise_linux:6::workstation | before 1:1.4.2-50.el6_4.4 | 1:1.4.2-50.el6_4.4 |
cups-develRed Hat:enterprise_linux:6::workstation | before 1:1.4.2-50.el6_4.4 | 1:1.4.2-50.el6_4.4 |
cups-libsRed Hat:enterprise_linux:6::workstation | before 1:1.4.2-50.el6_4.4 | 1:1.4.2-50.el6_4.4 |
cups-lpdRed Hat:enterprise_linux:6::workstation | before 1:1.4.2-50.el6_4.4 | 1:1.4.2-50.el6_4.4 |
cups-phpRed Hat:enterprise_linux:6::workstation | before 1:1.4.2-50.el6_4.4 | 1:1.4.2-50.el6_4.4 |
cupsSUSE:Linux Enterprise Desktop 12 From an advisory covering 3 CVEs | before 1.7.5-9.1 | 1.7.5-9.1 |
cupsSUSE:Linux Enterprise Software Development Kit 12 From an advisory covering 3 CVEs | before 1.7.5-9.1 | 1.7.5-9.1 |
cupsSUSE:Linux Enterprise Server 12 From an advisory covering 3 CVEs | before 1.7.5-9.1 | 1.7.5-9.1 |
cupsSUSE:Linux Enterprise Server for SAP Applications 12 From an advisory covering 3 CVEs | before 1.7.5-9.1 | 1.7.5-9.1 |
cups154SUSE:Linux Enterprise Module for Legacy 12 From an advisory covering 3 CVEs | before 1.5.4-9.1 | 1.5.4-9.1 |
cupsopenSUSE:Tumbleweed From an advisory covering 17 CVEs | before 2.1.3-2.3 | 2.1.3-2.3 |
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| PoC in GitHub | p1ckzi/CVE-2012-5519 | 2022-01-07 |
| Metasploit | CUPS 1.6.1 Root File Read | 2012-11-20 |
What each source reports
NVD Score used
CUPS 1.4.4, when running in certain Linux distributions such as Debian GNU/Linux, stores the web interface administrator key in /var/run/cups/certs/0 using certain permissions, which allows local users in the lpadmin group to read or write arbitrary files as root by leveraging the web interface.
- Record
CVE-2012-5519- CVSS 2.0
- 7.2 High
AV:L/AC:L/Au:N/C:C/I:C/A:C - Weakness
- CWE-264
- Updated
- 2026-11-02
CVE ListNo score
CUPS 1.4.4, when running in certain Linux distributions such as Debian GNU/Linux, stores the web interface administrator key in /var/run/cups/certs/0 using certain permissions, which allows local users in the lpadmin group to read or write arbitrary files as root by leveraging the web interface.
- Record
CVE-2012-5519- Updated
- 2026-11-02
EUVDEUVD-2012-5411No score
CUPS 1.4.4, when running in certain Linux distributions such as Debian GNU/Linux, stores the web interface administrator key in /var/run/cups/certs/0 using certain permissions, which allows local users in the lpadmin group to read or write arbitrary files as root by leveraging the web interface.
- Record
EUVD-2012-5411- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-ccjj-h3mm-j4rrNo score
CUPS 1.4.4, when running in certain Linux distributions such as Debian GNU/Linux, stores the web...
CUPS 1.4.4, when running in certain Linux distributions such as Debian GNU/Linux, stores the web interface administrator key in /var/run/cups/certs/0 using certain permissions, which allows local users in the lpadmin group to read or write arbitrary files as root by leveraging the web interface.
- Record
GHSA-ccjj-h3mm-j4rr- Updated
- 2026-11-02
OSVNo score
CUPS 1.4.4, when running in certain Linux distributions such as Debian GNU/Linux, stores the web interface administrator key in /var/run/cups/certs/0 using certain permissions, which allows local users in the lpadmin group to read or write arbitrary files as root by leveraging the web interface.
- Record
CVE-2012-5519- Updated
- 2026-11-02
OSVDEBIAN-CVE-2012-5519No score
CUPS 1.4.4, when running in certain Linux distributions such as Debian GNU/Linux, stores the web interface administrator key in /var/run/cups/certs/0 using certain permissions, which allows local users in the lpadmin group to read or write arbitrary files as root by leveraging the web interface.
- Record
DEBIAN-CVE-2012-5519- Updated
- 2026-11-02
Show 6 moreShow less
OSVopenSUSE-SU-2024:10075-1No score
cups-2.1.3-2.3 on GA media
These are all security issues fixed in the cups-2.1.3-2.3 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10075-1- Updated
- 2026-11-02
OSVSUSE-SU-2015:0575-1No score
Security update for CUPS
This update fixes various issues in CUPS.
* CVE-2014-3537 CVE-2014-5029 CVE-2014-5030 CVE-2014-5031: Various
insufficient symbolic link checking could have lead to privilege
escalation from the lp user to root.
Security Issues:
* CVE-2014-3537
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3537>
* CVE-2014-5029
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-5029>
* CVE-2014-5030
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-5030>
* CVE-2014-5031
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-5031>
- Record
SUSE-SU-2015:0575-1- Updated
- 2026-11-02
OSVSUSE-SU-2015:1011-1No score
Security update for CUPS
This update fixes various issues in CUPS.
* CVE-2014-3537 CVE-2014-5029 CVE-2014-5030 CVE-2014-5031: Various
insufficient symbolic link checking could have lead to privilege
escalation from the lp user to root.
Security Issues:
* CVE-2014-3537
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3537>
* CVE-2014-5029
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-5029>
* CVE-2014-5030
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-5030>
* CVE-2014-5031
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-5031>
- Record
SUSE-SU-2015:1011-1- Updated
- 2026-11-02
OSVSUSE-SU-2015:1041-1No score
Security update for cups
The following issues are fixed by this update:
- CVE-2012-5519: privilege escalation via cross-site scripting and bad print job submission used to replace cupsd.conf on server (bsc#924208).
- CVE-2015-1158: Improper Update of Reference Count
- CVE-2015-1159: Cross-Site Scripting
- Record
SUSE-SU-2015:1041-1- Updated
- 2026-11-02
OSVSUSE-SU-2015:1044-1No score
Security update for cups154
The following issues are fixed by this update:
- CVE-2012-5519: privilege escalation via cross-site scripting and bad print job submission used to replace cupsd.conf on server (bsc#924208).
- CVE-2015-1158: Improper Update of Reference Count
- CVE-2015-1159: Cross-Site Scripting
- Record
SUSE-SU-2015:1044-1- Updated
- 2026-11-02
OSVSUSE-SU-2015:1044-2No score
Security update for cups154
The following issues are fixed by this update:
- CVE-2012-5519: privilege escalation via cross-site scripting and bad print job submission used to replace cupsd.conf on server (bsc#924208).
- CVE-2015-1158: Improper Update of Reference Count
- CVE-2015-1159: Cross-Site Scripting
- Record
SUSE-SU-2015:1044-2- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, exploits, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, Metasploit, NVD, OSV, PoC in GitHub |
Dates are when Every CVE recorded each change. Upstream dates may differ.
References
openwall.com/lists/oss-security/2012/11/11/5
ubuntu.com/usn/USN-1654-1
support.apple.com/kb/HT5784
lists.apple.com/archives/security-announce/2013/Jun/msg00000.html
lists.opensuse.org/opensuse-security-announce/2015-06/msg00006.html
exchange.xforce.ibmcloud.com/vulnerabilities/80012
Show 44 moreShow less
bugs.debian.org/cgi-bin/bugreport.cgi?bug=692791
rhn.redhat.com/errata/RHSA-2013-0580.html
securityfocus.com/bid/56494
nvd.nist.gov/vuln/detail/CVE-2012-5519
access.redhat.com/errata/RHSA-2013:0580
bugzilla.redhat.com/show_bug.cgi?id=875898
github.com/advisories/GHSA-ccjj-h3mm-j4rr
security-tracker.debian.org/tracker/CVE-2012-5519
security.access.redhat.com/data/csaf/v2/advisories/2013/rhsa-2013_0580.json
cve.org/CVERecord?id=CVE-2012-5519
suse.com/support/update/announcement/2015/suse-su-20150575-1
bugzilla.suse.com/789566