CVE-2024-35235

A flaw was found in the cupsd server. When starting the cupsd server with a Listen configuration item pointing to a symbolic link, the cupsd process can perform an arbitrary chmod of the provided argument, providing world-writable access to the target. Since cupsd is often running as root, this issue can result in the change of permission of any user or system files to be world writable.

The CVE-2024-35235 vulnerability is classified as moderate severity rather than important primarily due to its requirement for elevated privileges and specific preconditions for exploitation. The vulnerability necessitates the ability to edit the cupsd.conf file, which typically requires administrative access. Furthermore, successful exploitation hinges on creating a symbolic link in a writable directory and manipulating the Listen directive within cupsd.conf. While this can lead to arbitrary chmod operations and potentially compromise system files, the precondition of administrative access significantly reduces the likelihood of exploitation by unauthorized users, thereby mitigating the overall impact and severity of the issue.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.