CVE-2004-1268

NameCVE-2004-1268
Descriptionlppasswd in CUPS 1.1.22 ignores write errors when modifying the CUPS passwd file, which allows local users to corrupt the file by filling the associated file system and triggering the write errors.
SourceCVE (at NVD; CERT, LWN, oss-sec, fulldisc, Debian ELTS, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, GitHub advisories/code/issues, web search, more)

Vulnerable and fixed packages

The table below lists information on source packages.

Source PackageReleaseVersionStatus
cups (PTS)bullseye2.3.3op2-3+deb11u8fixed
bullseye (security)2.3.3op2-3+deb11u10fixed
bookworm2.4.2-3+deb12u8fixed
bookworm (security)2.4.2-3+deb12u9fixed
trixie2.4.10-3fixed
trixie (security)2.4.10-3+deb13u1fixed
forky, sid2.4.14-1fixed

The information below is based on the following data on fixed versions.

PackageTypeReleaseFixed VersionUrgencyOriginDebian Bugs
cupssource(unstable)1.1.22-2
cupsyssource(unstable)1.1.22-2
Search for package or bug name: Reporting problems