NVD

Id
71650  
Name
CVE-2004-1270  
Description
lppasswd in CUPS 1.1.22, when run in environments that do not ensure that file descriptors 0, 1, and 2 are open when lppasswd is called, does not verify that the passwd.new file is different from STDERR, which allows local users to control output to passwd.new via certain user input that triggers an error message.  
Reject
 
CVSS Version
2  
CVSS Score
2.1  
Severity
Low  
CVSS Base Score
2.1  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:N/I:P/A:N)  
Pub Date
2017-07-18  
Published
2005-01-10  
Modified Date
2017-07-10  
Seq
2004-1270  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
370547 71650 CVE-2004-1270 oval:org.mitre.oval:def:11507  View
370548 71650 CVE-2004-1270 http://tigger.uic.edu/~jlongs2/holes/cups2.txt  View
370549 71650 CVE-2004-1270 GLSA-200412-25  View
370550 71650 CVE-2004-1270 MDKSA-2005:008  View
370551 71650 CVE-2004-1270 RHSA-2005:013  View
370552 71650 CVE-2004-1270 RHSA-2005:053  View
370553 71650 CVE-2004-1270 USN-50-1  View
370554 71650 CVE-2004-1270 cups-lppasswd-passwd-modify(18609)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
63211 JVNDB-2004-000553 CUPS の lppasswd における passwd.new ファイルと STDERR との違いを認識しない脆弱性 ------------ CVE-2004-1270 9697 CVE-2004-1270 71650 2.1 http://jvndb.jvn.jp/ja/contents/2004/JVNDB-2004-000553.html 2004-12-15 2007-04-01 View