CVE-2009-0032: Apple Cups

Medium severity, CVSS 6.9. EPSS: 0.4% chance of exploitation in the next 30 days.

CUPS on Mandriva Linux 2008.0, 2008.1, 2009.0, Corporate Server (CS) 3.0 and 4.0, and Multi Network Firewall (MNF) 2.0 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/pdf.log temporary file.

Affected products

• Apple Cups: any version

Published 2009-01-27. Last modified 2026-06-16.