CVE

Id
9698  
CVE No.
CVE-2004-1270  
Status
Candidate  
Description
lppasswd in CUPS 1.1.22, when run in environments that do not ensure that file descriptors 0, 1, and 2 are open when lppasswd is called, does not verify that the passwd.new file is different from STDERR, which allows local users to control output to passwd.new via certain user input that triggers an error message.  
Phase
Assigned (20041220)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
65897 9698 CVE-2004-1270 MISC:http://tigger.uic.edu/~jlongs2/holes/cups2.txt  View
65898 9698 CVE-2004-1270 GENTOO:GLSA-200412-25  View
65899 9698 CVE-2004-1270 URL:http://www.gentoo.org/security/en/glsa/glsa-200412-25.xml  View
65900 9698 CVE-2004-1270 MANDRAKE:MDKSA-2005:008  View
65901 9698 CVE-2004-1270 URL:http://www.mandriva.com/security/advisories?name=MDKSA-2005:008  View
65902 9698 CVE-2004-1270 REDHAT:RHSA-2005:013  View
65903 9698 CVE-2004-1270 URL:http://www.redhat.com/support/errata/RHSA-2005-013.html  View
65904 9698 CVE-2004-1270 REDHAT:RHSA-2005:053  View
65905 9698 CVE-2004-1270 URL:http://www.redhat.com/support/errata/RHSA-2005-053.html  View
65906 9698 CVE-2004-1270 UBUNTU:USN-50-1  View
65907 9698 CVE-2004-1270 URL:http://www.ubuntulinux.org/support/documentation/usn/usn-50-1  View
65908 9698 CVE-2004-1270 OVAL:oval:org.mitre.oval:def:11507  View
65909 9698 CVE-2004-1270 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:11507  View
65910 9698 CVE-2004-1270 XF:cups-lppasswd-passwd-modify(18609)  View

Related JVN