Lucene search

K
ubuntucveUbuntu.comUB:CVE-2004-1270
HistoryJan 10, 2005 - 12:00 a.m.

CVE-2004-1270

2005-01-1000:00:00
ubuntu.com
ubuntu.com
13

2.1 Low

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:L/AC:L/Au:N/C:N/I:P/A:N

0.0004 Low

EPSS

Percentile

5.2%

lppasswd in CUPS 1.1.22, when run in environments that do not ensure that
file descriptors 0, 1, and 2 are open when lppasswd is called, does not
verify that the passwd.new file is different from STDERR, which allows
local users to control output to passwd.new via certain user input that
triggers an error message.

OSVersionArchitecturePackageVersionFilename
ubuntu6.06noarchcupsys< 1.2.0-0ubuntu5UNKNOWN
ubuntu6.10noarchcupsys< 1.2.0-0ubuntu5UNKNOWN
ubuntu7.04noarchcupsys< 1.2.0-0ubuntu5UNKNOWN

2.1 Low

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:L/AC:L/Au:N/C:N/I:P/A:N

0.0004 Low

EPSS

Percentile

5.2%