NVD

Id
72531  
Name
CVE-2004-2154  
Description
CUPS before 1.1.21rc1 treats a Location directive in cupsd.conf as case sensitive, which allows attackers to bypass intended ACLs via a printer name containing uppercase or lowercase letters that are different from what is specified in the directive.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2016-12-20  
Published
2004-12-31  
Modified Date
2010-08-21  
Seq
2004-2154  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
374184 72531 CVE-2004-2154 oval:org.mitre.oval:def:9940  View
374185 72531 CVE-2004-2154 http://www.cups.org/str.php?L700  View
374186 72531 CVE-2004-2154 SUSE-SR:2005:018  View
374187 72531 CVE-2004-2154 RHSA-2005:571  View
374188 72531 CVE-2004-2154 USN-185-1  View
374189 72531 CVE-2004-2154 https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=162405  View
374190 72531 CVE-2004-2154 FLSA:163274  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
62237 JVNDB-2005-000439 CUPS の Location ディレクティブ におけるアクセス制限を回避される脆弱性 CUPS には、印刷リクエストを処理する際、CUPS スケジューラにおいてキュー名の大文字小文字の区別が適切にチェックされない不備が存在し、アクセス制限を回避される脆弱性が存在します。 CVE-2004-2154 10579 CVE-2004-2154 72531 7.5 http://jvndb.jvn.jp/ja/contents/2005/JVNDB-2005-000439.html 2005-07-14 2007-04-01 View