CVE-2014-5030: Apple Cups

Low severity, CVSS 1.9. EPSS: 0.4% chance of exploitation in the next 30 days.

CUPS before 2.0 allows local users to read arbitrary files via a symlink attack on (1) index.html, (2) index.class, (3) index.pl, (4) index.php, (5) index.pyc, or (6) index.py.

Affected products

• Apple Cups: up to and including 1.7.4; version 1.7 only; version 1.7.0 only; version 1.7.1 only; version 1.7.2 only; version 1.7.3 only
• Canonical Ubuntu Linux: version 10.04 only; version 12.04 only; version 14.04 only

Published 2014-07-29. Last modified 2026-06-17.