CVE-2004-1268
CVE-2004-1268
This page contains facts from public vulnerability sources. Check the original advisory before updating.
lppasswd in CUPS 1.1.22 ignores write errors when modifying the CUPS passwd file, which allows local users to corrupt the file by filling the associated file system and triggering the write errors.
EPSS 0.5% · Fix available
- Published
- Updated
Stack: system
Affected products and versions
Original sources
- http://www.redhat.com/support/errata/RHSA-2005-013.html
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10398
- http://www.mandriva.com/security/advisories?name=MDKSA-2005:008
- http://www.redhat.com/support/errata/RHSA-2005-053.html
- https://usn.ubuntu.com/50-1/
- https://exchange.xforce.ibmcloud.com/vulnerabilities/18606
- http://www.gentoo.org/security/en/glsa/glsa-200412-25.xml
- http://tigger.uic.edu/~jlongs2/holes/cups2.txt
- https://nvd.nist.gov/vuln/detail/CVE-2004-1268