CVE-2004-2154 CUPS before 1.1.21rc1 treats a Location directive in cupsd.conf as case sensitive, which allows attackers to bypass intended ACLs via a printer name containing uppercase or lowercase letters that are....
CriticalCVSS 9.8
EPSS 2.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
CUPS before 1.1.21rc1 treats a Location directive in cupsd.conf as case sensitive, which allows attackers to bypass intended ACLs via a printer name containing uppercase or lowercase letters that are different from what is specified in the directive.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| apple cups | < 1.1.21 | 1.1.21 |
| apple cups | = 1.1.21 | No fix listed |
| Canonical Ubuntu Linux | = 4.10 | No fix listed |
| debian/cups(Debian:12) | < 1.1.20final+rc1-1 | 1.1.20final+rc1-1 |
| debian/cups(Debian:13) | < 1.1.20final+rc1-1 | 1.1.20final+rc1-1 |
| debian/cups(Debian:14) | < 1.1.20final+rc1-1 | 1.1.20final+rc1-1 |
References
- www.cups.org broken-link patch
- SUSE-SR:2005:018 broken-link vendor-advisory
- RHSA-2005:571 broken-link vendor-advisory
- USN-185-1 third-party-advisory vendor-advisory
- bugzilla.redhat.com issue-tracking vendor-advisory
- FLSA:163274 issue-tracking vendor-advisory
- oval:org.mitre.oval:def:9940 broken-link signature vdb-entry
- Debian Security Tracker CVE-2004-2154 vendor-advisory