CVE-2004-1269 lppasswd in CUPS 1.1.22 does not remove the passwd.new file if it encounters a file-size resource limit while writing to passwd.new, which causes subsequent invocations of lppasswd to fail.
MediumCVSS 5.0
EPSS 9.0%
PoC
- Published
- Updated
- Exploit status
- Proof-of-concept only
Description
lppasswd in CUPS 1.1.22 does not remove the passwd.new file if it encounters a file-size resource limit while writing to passwd.new, which causes subsequent invocations of lppasswd to fail.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| easy software products cups | = 1.0.4 | No fix listed |
| easy software products cups | = 1.0.4_8 | No fix listed |
| easy software products cups | = 1.1.1 | No fix listed |
| easy software products cups | = 1.1.4 | No fix listed |
| easy software products cups | = 1.1.4_2 | No fix listed |
| easy software products cups | = 1.1.4_3 | No fix listed |
| easy software products cups | = 1.1.4_5 | No fix listed |
| easy software products cups | = 1.1.6 | No fix listed |
| easy software products cups | = 1.1.7 | No fix listed |
| easy software products cups | = 1.1.10 | No fix listed |
| easy software products cups | = 1.1.12 | No fix listed |
| easy software products cups | = 1.1.13 | No fix listed |
| easy software products cups | = 1.1.14 | No fix listed |
| easy software products cups | = 1.1.15 | No fix listed |
| easy software products cups | = 1.1.16 | No fix listed |
| easy software products cups | = 1.1.17 | No fix listed |
| easy software products cups | = 1.1.18 | No fix listed |
| easy software products cups | = 1.1.19 | No fix listed |
| easy software products cups | = 1.1.19_rc5 | No fix listed |
| easy software products cups | = 1.1.20 | No fix listed |
| easy software products cups | = 1.1.21 | No fix listed |
| easy software products cups | = 1.1.22_rc1 | No fix listed |
| redhat fedora core | = core_2.0 | No fix listed |
| redhat fedora core | = core_3.0 | No fix listed |
| debian/cups(Debian:12) | < 1.1.22-2 | 1.1.22-2 |
Show 2 more
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/cups(Debian:13) | < 1.1.22-2 | 1.1.22-2 |
| debian/cups(Debian:14) | < 1.1.22-2 | 1.1.22-2 |
References
- tigger.uic.edu exploit vendor-advisory
- GLSA-200412-25 vendor-advisory
- MDKSA-2005:008 vendor-advisory
- RHSA-2005:013 vendor-advisory
- RHSA-2005:053 vendor-advisory
- cups-lppasswd-dos(18608) vdb-entry
- oval:org.mitre.oval:def:9545 signature vdb-entry
- USN-50-1 vendor-advisory
- Debian Security Tracker CVE-2004-1269 vendor-advisory