CVE-2004-1268: Low severity Easy Software Products Cups vulnerability
Published Dec 22, 2004
·Updated
lppasswd in CUPS 1.1.22 ignores write errors when modifying the CUPS passwd file, which allows local users to corrupt the file by filling the associated file system and triggering the write errors.
Affected Software
24 affected components
Easy Software Products Cups=1.0.4
Easy Software Products Cups=1.0.4_8
Easy Software Products Cups=1.1.1
Easy Software Products Cups=1.1.4
Easy Software Products Cups=1.1.4_2
Easy Software Products Cups=1.1.4_3
Easy Software Products Cups=1.1.4_5
Easy Software Products Cups=1.1.6
Easy Software Products Cups=1.1.7
Easy Software Products Cups=1.1.10
Easy Software Products Cups=1.1.12
Easy Software Products Cups=1.1.13
Easy Software Products Cups=1.1.14
Easy Software Products Cups=1.1.15
Easy Software Products Cups=1.1.16
Easy Software Products Cups=1.1.17
Easy Software Products Cups=1.1.18
Easy Software Products Cups=1.1.19
Easy Software Products Cups=1.1.19_rc5
Easy Software Products Cups=1.1.20
Easy Software Products Cups=1.1.21
Easy Software Products Cups=1.1.22_rc1
redhat Fedora Core=core_2.0
redhat Fedora Core=core_3.0
Event History
Dec 22, 2004
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2004-1268?
CVE-2004-1268 is classified as a moderate severity vulnerability.
2
How do I fix CVE-2004-1268?
To fix CVE-2004-1268, you should upgrade to a version of CUPS that is not affected by the vulnerability.
3
What does the CVE-2004-1268 vulnerability allow an attacker to do?
CVE-2004-1268 allows local users to corrupt the CUPS passwd file by causing write errors.
4
Which versions of CUPS are affected by CVE-2004-1268?
CVE-2004-1268 affects CUPS versions 1.1.22 and earlier, including specific earlier versions.
5
Is there a workaround for CVE-2004-1268?
There are no specific workarounds for CVE-2004-1268; it is advised to update to a secure version.