CVE-2004-2154: Critical severity Easy Software Products Cups vulnerability
CUPS before 1.1.21rc1 treats a Location directive in cupsd.conf as case sensitive, which allows attackers to bypass intended ACLs via a printer name containing uppercase or lowercase letters that are different from what is specified in the directive.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2004-2154?
CVE-2004-2154 is considered a moderate severity vulnerability as it allows attackers to bypass access control lists.
How do I fix CVE-2004-2154?
To fix CVE-2004-2154, upgrade to CUPS version 1.1.21rc1 or later which addresses this case sensitivity issue.
Which versions of CUPS are affected by CVE-2004-2154?
CVE-2004-2154 affects CUPS versions prior to 1.1.21rc1, including versions 1.0.4, 1.1.19, and earlier.
What could happen if CVE-2004-2154 is exploited?
Exploitation of CVE-2004-2154 could lead to unauthorized access to printers managed by CUPS, potentially allowing attackers to print arbitrary documents.
What does CVE-2004-2154 specifically affect in CUPS?
CVE-2004-2154 specifically affects the case sensitivity of the Location directive in cupsd.conf, allowing for bypassing of intended ACLs.