VulnerabilityModified
CVE-2004-1268
lppasswd in CUPS 1.1.22 ignores write errors when modifying the CUPS passwd file, which allows local users to corrupt the file by filling the associated file system and triggering the write errors.
LOW 2.1EPSS 0.45%
Does this matter?
Lower severity and a low EPSS score (0.45%). Track it; it rarely justifies an emergency change on its own.
Description
lppasswd in CUPS 1.1.22 ignores write errors when modifying the CUPS passwd file, which allows local users to corrupt the file by filling the associated file system and triggering the write errors.
- CVSS 2.0
- 2.1 LOWAV:L/AC:L/Au:N/C:N/I:P/A:N
- EPSS
- 0.45% probability · 38th percentile
- CISA KEV
- Not listed
- Affected
- easy software products/cups · redhat/fedora core
- Source
- cve@mitre.org
References
- http://tigger.uic.edu/~jlongs2/holes/cups2.txtExploit, Vendor Advisory
- http://www.gentoo.org/security/en/glsa/glsa-200412-25.xml
- http://www.mandriva.com/security/advisories?name=MDKSA-2005:008
- http://www.redhat.com/support/errata/RHSA-2005-013.html
- http://www.redhat.com/support/errata/RHSA-2005-053.html
- https://exchange.xforce.ibmcloud.com/vulnerabilities/18606
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10398
- https://usn.ubuntu.com/50-1/
- http://tigger.uic.edu/~jlongs2/holes/cups2.txtExploit, Vendor Advisory
- http://www.gentoo.org/security/en/glsa/glsa-200412-25.xml
- http://www.mandriva.com/security/advisories?name=MDKSA-2005:008
- http://www.redhat.com/support/errata/RHSA-2005-013.html
- http://www.redhat.com/support/errata/RHSA-2005-053.html
- https://exchange.xforce.ibmcloud.com/vulnerabilities/18606
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10398
- https://usn.ubuntu.com/50-1/
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.