CVE-2002-1366

2004-09-0104:00:00

[email protected]

web.nvd.nist.gov

cups

unix printing system

cve-2002-1366

file race conditions

security vulnerability

6.2 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:H/Au:N/C:C/I:C/A:C

7.3 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.6%

JSON

Common Unix Printing System (CUPS) 1.1.14 through 1.1.17 allows local users with lp privileges to create or overwrite arbitrary files via file race conditions, as demonstrated by ice-cream.

Affected configurations

NVD

Node

easy_software_productscupsMatch1.0.4

easy_software_productscupsMatch1.1.1

easy_software_productscupsMatch1.1.4

easy_software_productscupsMatch1.1.6

easy_software_productscupsMatch1.1.7

easy_software_productscupsMatch1.1.10

easy_software_productscupsMatch1.1.13

easy_software_productscupsMatch1.1.14

easy_software_productscupsMatch1.1.17

Node

applemac_os_xMatch10.2

applemac_os_xMatch10.2.2

CPENameOperatorVersion
easy_software_products:cupseasy software products cupseq1.0.4
easy_software_products:cupseasy software products cupseq1.1.1
easy_software_products:cupseasy software products cupseq1.1.4
easy_software_products:cupseasy software products cupseq1.1.6
easy_software_products:cupseasy software products cupseq1.1.7
easy_software_products:cupseasy software products cupseq1.1.10
easy_software_products:cupseasy software products cupseq1.1.13
easy_software_products:cupseasy software products cupseq1.1.14
easy_software_products:cupseasy software products cupseq1.1.17

CPE	Name	Operator	Version
easy_software_products:cups	easy software products cups	eq	1.0.4
easy_software_products:cups	easy software products cups	eq	1.1.1
easy_software_products:cups	easy software products cups	eq	1.1.4
easy_software_products:cups	easy software products cups	eq	1.1.6
easy_software_products:cups	easy software products cups	eq	1.1.7
easy_software_products:cups	easy software products cups	eq	1.1.10
easy_software_products:cups	easy software products cups	eq	1.1.13
easy_software_products:cups	easy software products cups	eq	1.1.14
easy_software_products:cups	easy software products cups	eq	1.1.17