CVE-2010-0393

CVE-2010-0393 describes a privilege escalation vulnerability in CUPS versions 1.2.2, 1.3.7, 1.3.9, and 1.4.1, specifically within the lppasswd utility. A local attacker can exploit this by manipulating an environment variable to point to a crafted localization file containing format string specifiers, leading to complete compromise of confidentiality, integrity, and availability. With a CVSS score of 6.9, this vulnerability is considered high severity, requiring local access and medium attack complexity. There is no evidence of active exploitation, public exploit code, or significant community discussion, suggesting it is not widely targeted.