CVE-2004-1268

2005-01-1005:00:00

Debian Security Bug Tracker

security-tracker.debian.org

2.1 Low

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:L/AC:L/Au:N/C:N/I:P/A:N

0.0004 Low

EPSS

Percentile

5.2%

JSON

lppasswd in CUPS 1.1.22 ignores write errors when modifying the CUPS passwd file, which allows local users to corrupt the file by filling the associated file system and triggering the write errors.

OSVersionArchitecturePackageVersionFilename
Debian12allcups< 1.1.22-2cups_1.1.22-2_all.deb
Debian11allcups< 1.1.22-2cups_1.1.22-2_all.deb
Debian10allcups< 1.1.22-2cups_1.1.22-2_all.deb
Debian999allcups< 1.1.22-2cups_1.1.22-2_all.deb
Debian13allcups< 1.1.22-2cups_1.1.22-2_all.deb

OS	Version	Architecture	Package	Version	Filename
Debian	12	all	cups	< 1.1.22-2	cups_1.1.22-2_all.deb
Debian	11	all	cups	< 1.1.22-2	cups_1.1.22-2_all.deb
Debian	10	all	cups	< 1.1.22-2	cups_1.1.22-2_all.deb
Debian	999	all	cups	< 1.1.22-2	cups_1.1.22-2_all.deb
Debian	13	all	cups	< 1.1.22-2	cups_1.1.22-2_all.deb