5

CVE-2004-1269

Exploit
lppasswd in CUPS 1.1.22 does not remove the passwd.new file if it encounters a file-size resource limit while writing to passwd.new, which causes subsequent invocations of lppasswd to fail.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Easy Software Products ≫ Cups Version 1.0.4
Easy Software Products ≫ Cups Version 1.0.4_8
Easy Software Products ≫ Cups Version 1.1.1
Easy Software Products ≫ Cups Version 1.1.4
Easy Software Products ≫ Cups Version 1.1.4_2
Easy Software Products ≫ Cups Version 1.1.4_3
Easy Software Products ≫ Cups Version 1.1.4_5
Easy Software Products ≫ Cups Version 1.1.6
Easy Software Products ≫ Cups Version 1.1.7
Easy Software Products ≫ Cups Version 1.1.10
Easy Software Products ≫ Cups Version 1.1.12
Easy Software Products ≫ Cups Version 1.1.13
Easy Software Products ≫ Cups Version 1.1.14
Easy Software Products ≫ Cups Version 1.1.15
Easy Software Products ≫ Cups Version 1.1.16
Easy Software Products ≫ Cups Version 1.1.17
Easy Software Products ≫ Cups Version 1.1.18
Easy Software Products ≫ Cups Version 1.1.19
Easy Software Products ≫ Cups Version 1.1.19_rc5
Easy Software Products ≫ Cups Version 1.1.20
Easy Software Products ≫ Cups Version 1.1.21
Easy Software Products ≫ Cups Version 1.1.22_rc1
Redhat ≫ Fedora Core Version core_2.0
Redhat ≫ Fedora Core Version core_3.0
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 8.95% 0.946
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 5 10 2.9
AV:N/AC:L/Au:N/C:N/I:N/A:P
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://www.gentoo.org/security/en/glsa/glsa-200412-25.xml
http://www.redhat.com/support/errata/RHSA-2005-013.html
http://www.redhat.com/support/errata/RHSA-2005-053.html
https://usn.ubuntu.com/50-1/
http://www.mandriva.com/security/advisories?name=MDKSA-2005:008
http://tigger.uic.edu/~jlongs2/holes/cups2.txt
Vendor Advisory
Exploit
https://exchange.xforce.ibmcloud.com/vulnerabilities/18608
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9545