CVE-2004-1270

published 2005-01-10

CVE-2004-1270: lppasswd in CUPS 1.1.22, when run in environments that do not ensure that file descriptors 0, 1, and 2 are open when lppasswd is called, does not verify that…

low 2.1 CVSS 3.1

AV L AC L Au N C N I P A N

lppasswd in CUPS 1.1.22, when run in environments that do not ensure that file descriptors 0, 1, and 2 are open when lppasswd is called, does not verify that the passwd.new file is different from STDERR, which allows local users to control output to passwd.new via certain user input that triggers an error message.

Affected

29 ranges · showing 25

Vendor	Product	Version range	Fixed in
apple	cups	>= 0 < 1.1.22-2	1.1.22-2
apple	cups	>= 0 < 1.1.22-2	1.1.22-2
apple	cups	>= 0 < 1.1.22-2	1.1.22-2
apple	cups	>= 0 < 1.1.22-2	1.1.22-2
debian	cups	< cups 1.1.22-2 (bookworm)	cups 1.1.22-2 (bookworm)
easy_software_products	cups	—	—
easy_software_products	cups	—	—
easy_software_products	cups	—	—
easy_software_products	cups	—	—
easy_software_products	cups	—	—
easy_software_products	cups	—	—
easy_software_products	cups	—	—
easy_software_products	cups	—	—
easy_software_products	cups	—	—
easy_software_products	cups	—	—
easy_software_products	cups	—	—
easy_software_products	cups	—	—
easy_software_products	cups	—	—
easy_software_products	cups	—	—
easy_software_products	cups	—	—
easy_software_products	cups	—	—
easy_software_products	cups	—	—
easy_software_products	cups	—	—
easy_software_products	cups	—	—
easy_software_products	cups	—	—

CVSS provenance

nvd 2.1 LOW AV:L/AC:L/Au:N/C:N/I:P/A:N

osv 2.1 LOW