CVE-2002-1366: Race Condition
Published Dec 26, 2002
·Updated
Common Unix Printing System (CUPS) 1.1.14 through 1.1.17 allows local users with lp privileges to create or overwrite arbitrary files via file race conditions, as demonstrated by ice-cream.
Affected Software
11 affected components
Easy Software Products Cups=1.1.10
Easy Software Products Cups=1.1.7
Easy Software Products Cups=1.1.13
Easy Software Products Cups=1.1.17
Easy Software Products Cups=1.1.4
Easy Software Products Cups=1.1.1
Easy Software Products Cups=1.0.4
Easy Software Products Cups=1.1.14
Easy Software Products Cups=1.1.6
Apple iOS and macOS=10.2.2
Apple iOS and macOS=10.2
Event History
Dec 26, 2002
CVE Published
05:00 AM
Sep 1, 2004
CVE Published
via MITRE·08:00 AM
Data Sourced
via MITRE·08:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2002-1366?
CVE-2002-1366 has a medium severity rating as it allows local users to create or overwrite arbitrary files.
2
How do I fix CVE-2002-1366?
To mitigate CVE-2002-1366, upgrade to CUPS version 1.1.18 or later where the vulnerability has been addressed.
3
Who is affected by CVE-2002-1366?
Users of Common Unix Printing System (CUPS) versions 1.1.1 through 1.1.17 are affected by CVE-2002-1366.
4
What type of attack does CVE-2002-1366 enable?
CVE-2002-1366 enables local users to exploit file race conditions to gain unauthorized file access.
5
When was CVE-2002-1366 discovered?
CVE-2002-1366 was publicly disclosed in December 2002.