PT-2004-2199 · Apple+1 · Cups+1
Publicado
2004-12-22
·
Atualizado
2018-10-03
·
CVE-2004-1270
CVSS v2.0
2.1
Baixa
| Vetor | AV:L/AC:L/Au:N/C:N/I:P/A:N |
Name of the Vulnerable Software and Affected Versions:
CUPS version 1.1.22
Description:
The issue allows local users to control output to the passwd.new file via certain user input that triggers an error message, due to a lack of verification that the passwd.new file is different from STDERR when lppasswd is run in environments where file descriptors 0, 1, and 2 are not open.
Recommendations:
For CUPS version 1.1.22, ensure that file descriptors 0, 1, and 2 are open when running lppasswd to prevent the issue. As a temporary workaround, consider restricting access to the lppasswd command until a proper fix is applied.
Exploit
Correção
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Cups
Red Hat