CVE-2002-1366

EPSS 0.09%
Published 26.12.2002 05:00:00
Last modified 03.04.2025 01:03:51
Source cve@mitre.org
Teams watchlist Login
Open Login

Common Unix Printing System (CUPS) 1.1.14 through 1.1.17 allows local users with lp privileges to create or overwrite arbitrary files via file race conditions, as demonstrated by ice-cream.

Affected products Warnungen 0 Metrics 2 CWE 0 References 12

Data is provided by the National Vulnerability Database (NVD)

Easy Software Products ≫ Cups Version1.0.4

Easy Software Products ≫ Cups Version1.1.1

Easy Software Products ≫ Cups Version1.1.4

Easy Software Products ≫ Cups Version1.1.6

Easy Software Products ≫ Cups Version1.1.7

Easy Software Products ≫ Cups Version1.1.10

Easy Software Products ≫ Cups Version1.1.13

Easy Software Products ≫ Cups Version1.1.14

Easy Software Products ≫ Cups Version1.1.17

Apple ≫ macOS X Version10.2

Apple ≫ macOS X Version10.2.2

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	0.09%	0.263

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	6.2	1.9	10	AV:L/AC:H/Au:N/C:C/I:C/A:C

http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0117.html

http://marc.info/?l=bugtraq&m=104032149026670&w=2

http://www.debian.org/security/2003/dsa-232

http://www.idefense.com/advisory/12.19.02.txt

http://www.mandrakesoft.com/security/advisories?name=MDKSA-2003:001

http://www.novell.com/linux/security/advisories/2003_002_cups.html

http://www.redhat.com/support/errata/RHSA-2002-295.html

http://www.securityfocus.com/bid/6435

https://exchange.xforce.ibmcloud.com/vulnerabilities/10907

https://nvd.nist.gov/vuln/detail/CVE-2002-1366

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2002-1366

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2002-1366

EUVD