cbcvebase.
CVE-2004-0923
published 2005-01-27

CVE-2004-0923: CUPS 1.1.20 and earlier records authentication information for a device URI in the error_log file, which allows local users to obtain user names and passwords.

low2.1CVSS 3.1
AVLACLAuNCPINAN
CUPS 1.1.20 and earlier records authentication information for a device URI in the error_log file, which allows local users to obtain user names and passwords.

Affected

56 ranges· showing 25
VendorProductVersion rangeFixed in
applecups>= 0 < 1.1.20final+rc1-91.1.20final+rc1-9
applecups>= 0 < 1.1.20final+rc1-91.1.20final+rc1-9
applecups>= 0 < 1.1.20final+rc1-91.1.20final+rc1-9
applecups>= 0 < 1.1.20final+rc1-91.1.20final+rc1-9
applemac_os_x
applemac_os_x
applemac_os_x
applemac_os_x
applemac_os_x
applemac_os_x
applemac_os_x
applemac_os_x
applemac_os_x
applemac_os_x
applemac_os_x
applemac_os_x
applemac_os_x
applemac_os_x
applemac_os_x
applemac_os_x_server
applemac_os_x_server
applemac_os_x_server
applemac_os_x_server
applemac_os_x_server
applemac_os_x_server

CVSS provenance

nvd2.1LOWAV:L/AC:L/Au:N/C:P/I:N/A:N
osv2.1LOW