Mend.io Vulnerability Database

What is a CVE vulnerability ID? icon What is a WS vulnerability ID? icon What is an MSC vulnerability ID? icon
New vulnerability? Tell us about it!
icon

We found results for “”

CVE-2004-1270

Date: December 22, 2004

lppasswd in CUPS 1.1.22, when run in environments that do not ensure that file descriptors 0, 1, and 2 are open when lppasswd is called, does not verify that the passwd.new file is different from STDERR, which allows local users to control output to passwd.new via certain user input that triggers an error message.

Severity Score

Related Resources (11)

https://usn.ubuntu.com/50-1/
https://nvd.nist.gov/vuln/detail/CVE-2004-1270
https://people.canonical.com/~ubuntu-security/cve/CVE-2004-1270
http://www.redhat.com/support/errata/RHSA-2005-013.html
https://exchange.xforce.ibmcloud.com/vulnerabilities/18609
http://www.mandriva.com/security/advisories?name=MDKSA-2005:008
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11507
http://tigger.uic.edu/~jlongs2/holes/cups2.txt
http://www.gentoo.org/security/en/glsa/glsa-200412-25.xml
http://www.redhat.com/support/errata/RHSA-2005-053.html
https://www.mend.io/vulnerability-database/CVE-2004-1270

Severity Score

CVSS v3.1

Base Score:
Attack Vector (AV): LOCAL
Attack Complexity (AC): LOW
Privileges Required (PR): NONE
User Interaction (UI): NONE
Scope (S): UNCHANGED
Confidentiality (C): NONE
Integrity (I): LOW
Availability (A): NONE

CVSS v2

Base Score:
Access Vector (AV): LOCAL
Access Complexity (AC): LOW
Authentication (AU): NONE
Confidentiality (C): NONE
Integrity (I): PARTIAL
Availability (A): NONE
Additional information:

Do you need more information?

Contact Us