CVE-2004-1268
First published: Wed Dec 22 2004(Updated: )
lppasswd in CUPS 1.1.22 ignores write errors when modifying the CUPS passwd file, which allows local users to corrupt the file by filling the associated file system and triggering the write errors.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| CUPS (Common UNIX Printing System) | =1.0.4 | |
| CUPS (Common UNIX Printing System) | =1.0.4_8 | |
| CUPS (Common UNIX Printing System) | =1.1.1 | |
| CUPS (Common UNIX Printing System) | =1.1.4 | |
| CUPS (Common UNIX Printing System) | =1.1.4_2 | |
| CUPS (Common UNIX Printing System) | =1.1.4_3 | |
| CUPS (Common UNIX Printing System) | =1.1.4_5 | |
| CUPS (Common UNIX Printing System) | =1.1.6 | |
| CUPS (Common UNIX Printing System) | =1.1.7 | |
| CUPS (Common UNIX Printing System) | =1.1.10 | |
| CUPS (Common UNIX Printing System) | =1.1.12 | |
| CUPS (Common UNIX Printing System) | =1.1.13 | |
| CUPS (Common UNIX Printing System) | =1.1.14 | |
| CUPS (Common UNIX Printing System) | =1.1.15 | |
| CUPS (Common UNIX Printing System) | =1.1.16 | |
| CUPS (Common UNIX Printing System) | =1.1.17 | |
| CUPS (Common UNIX Printing System) | =1.1.18 | |
| CUPS (Common UNIX Printing System) | =1.1.19 | |
| CUPS (Common UNIX Printing System) | =1.1.19_rc5 | |
| CUPS (Common UNIX Printing System) | =1.1.20 | |
| CUPS (Common UNIX Printing System) | =1.1.21 | |
| CUPS (Common UNIX Printing System) | =1.1.22_rc1 | |
| Red Hat Fedora Core | =core_2.0 | |
| Red Hat Fedora Core | =core_3.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://tigger.uic.edu/~jlongs2/holes/cups2.txt
- http://www.redhat.com/support/errata/RHSA-2005-013.html
- http://www.redhat.com/support/errata/RHSA-2005-053.html
- http://www.gentoo.org/security/en/glsa/glsa-200412-25.xml
- http://www.mandriva.com/security/advisories?name=MDKSA-2005:008
- https://exchange.xforce.ibmcloud.com/vulnerabilities/18606
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10398
- https://usn.ubuntu.com/50-1/
Frequently Asked Questions
What is the severity of CVE-2004-1268?
CVE-2004-1268 is classified as a moderate severity vulnerability.
How do I fix CVE-2004-1268?
To fix CVE-2004-1268, you should upgrade to a version of CUPS that is not affected by the vulnerability.
What does the CVE-2004-1268 vulnerability allow an attacker to do?
CVE-2004-1268 allows local users to corrupt the CUPS passwd file by causing write errors.
Which versions of CUPS are affected by CVE-2004-1268?
CVE-2004-1268 affects CUPS versions 1.1.22 and earlier, including specific earlier versions.
Is there a workaround for CVE-2004-1268?
There are no specific workarounds for CVE-2004-1268; it is advised to update to a secure version.
- agent/references
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/weakness
- agent/severity
- agent/author
- agent/description
- agent/first-publish-date
- agent/event
- agent/source
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- collector/nvd-historical
- vendor/easy software products
- canonical/cups (common unix printing system)
- version/cups (common unix printing system)/1.0.4
- version/cups (common unix printing system)/1.0.4_8
- version/cups (common unix printing system)/1.1.1
- version/cups (common unix printing system)/1.1.4
- version/cups (common unix printing system)/1.1.4_2
- version/cups (common unix printing system)/1.1.4_3
- version/cups (common unix printing system)/1.1.4_5
- version/cups (common unix printing system)/1.1.6
- version/cups (common unix printing system)/1.1.7
- version/cups (common unix printing system)/1.1.10
- version/cups (common unix printing system)/1.1.12
- version/cups (common unix printing system)/1.1.13
- version/cups (common unix printing system)/1.1.14
- version/cups (common unix printing system)/1.1.15
- version/cups (common unix printing system)/1.1.16
- version/cups (common unix printing system)/1.1.17
- version/cups (common unix printing system)/1.1.18
- version/cups (common unix printing system)/1.1.19
- version/cups (common unix printing system)/1.1.19_rc5
- version/cups (common unix printing system)/1.1.20
- version/cups (common unix printing system)/1.1.21
- version/cups (common unix printing system)/1.1.22_rc1
- vendor/redhat
- canonical/red hat fedora core
- version/red hat fedora core/core_2.0
- version/red hat fedora core/core_3.0