CVE-2004-1268 | BDVDB-2026-7600 Detail
Description#
lppasswd in CUPS 1.1.22 ignores write errors when modifying the CUPS passwd file, which allows local users to corrupt the file by filling the associated file system and triggering the write errors.
Impact#
No impact statement in the source data.
Weaknesses#
No weakness recorded in the source data.
References#
- http://www.redhat.com/support/errata/RHSA-2005-013.html
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10398
- http://www.mandriva.com/security/advisories?name=MDKSA-2005:008
- http://www.redhat.com/support/errata/RHSA-2005-053.html
- https://usn.ubuntu.com/50-1/
- https://exchange.xforce.ibmcloud.com/vulnerabilities/18606
- http://www.gentoo.org/security/en/glsa/glsa-200412-25.xml
- http://tigger.uic.edu/~jlongs2/holes/cups2.txt
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.
- Version 2Most recent update recorded in the CVE List.