{"id":"CVE-2004-1268","aliases":["DEBIAN-CVE-2004-1268","EUVD-2004-1265","GHSA-7rhq-w6x9-x4gf","RHSA-2005:013","RHSA-2005:053"],"status":"published","title":"lppasswd in CUPS 1.1.22 ignores write errors when modifying the CUPS passwd file, which allows...","description":"lppasswd in CUPS 1.1.22 ignores write errors when modifying the CUPS passwd file, which allows local users to corrupt the file by filling the associated file system and triggering the write errors.","severity":{"version":"2.0","score":2.1,"vector":"AV:L/AC:L/Au:N/C:N/I:P/A:N","level":"low","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-07","score":0.00454,"percentile":0.39655,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"published":"2004-12-22T05:00:00Z","modified":"2026-10-21T15:47:21Z","fixes":[{"ecosystem":"Debian:12","package":"cups","fixed_in":["1.1.22-2"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"cups","fixed_in":["1.1.22-2"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"cups","fixed_in":["1.1.22-2"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"cups","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.22-2"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"cups","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.22-2"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"cups","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.22-2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::as","package":"cups","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.17-13.3.22"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::as","package":"cups-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.17-13.3.22"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::as","package":"cups-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.17-13.3.22"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::as","package":"cups-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.17-13.3.22"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::desktop","package":"cups","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.17-13.3.22"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::desktop","package":"cups-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.17-13.3.22"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::desktop","package":"cups-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.17-13.3.22"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::desktop","package":"cups-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.17-13.3.22"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::es","package":"cups","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.17-13.3.22"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::es","package":"cups-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.17-13.3.22"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::es","package":"cups-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.17-13.3.22"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::es","package":"cups-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.17-13.3.22"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::ws","package":"cups","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.17-13.3.22"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::ws","package":"cups-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.17-13.3.22"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::ws","package":"cups-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.17-13.3.22"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::ws","package":"cups-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.17-13.3.22"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::as","package":"cups","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.22-0.rc1.9.6"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::as","package":"cups-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.22-0.rc1.9.6"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::as","package":"cups-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.22-0.rc1.9.6"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::as","package":"cups-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.22-0.rc1.9.6"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::desktop","package":"cups","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.22-0.rc1.9.6"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::desktop","package":"cups-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.22-0.rc1.9.6"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::desktop","package":"cups-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.22-0.rc1.9.6"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::desktop","package":"cups-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.22-0.rc1.9.6"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::es","package":"cups","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.22-0.rc1.9.6"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::es","package":"cups-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.22-0.rc1.9.6"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::es","package":"cups-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.22-0.rc1.9.6"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::es","package":"cups-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.22-0.rc1.9.6"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::ws","package":"cups","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.22-0.rc1.9.6"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::ws","package":"cups-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.22-0.rc1.9.6"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::ws","package":"cups-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.22-0.rc1.9.6"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::ws","package":"cups-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.22-0.rc1.9.6"}]}],"bundled":7}],"products":[{"vendor":"easy_software_products","product":"cups"},{"vendor":"redhat","product":"fedora_core"}],"references":[{"url":"http://www.redhat.com/support/errata/RHSA-2005-013.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","web"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10398","tags":["vdb-entry","signature","x_refsource_OVAL","x_transferred","web"]},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2005:008","tags":["vendor-advisory","x_refsource_MANDRAKE","x_transferred","advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2005-053.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","web"]},{"url":"https://usn.ubuntu.com/50-1/","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","web"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18606","tags":["vdb-entry","x_refsource_XF","x_transferred","web"]},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200412-25.xml","tags":["vendor-advisory","x_refsource_GENTOO","x_transferred","web"]},{"url":"http://tigger.uic.edu/~jlongs2/holes/cups2.txt","tags":["x_refsource_MISC","x_transferred","Exploit","Vendor Advisory","advisory","evidence"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2004-1268","tags":["advisory"]},{"url":"https://usn.ubuntu.com/50-1"},{"url":"https://github.com/advisories/GHSA-7rhq-w6x9-x4gf"},{"url":"https://security-tracker.debian.org/tracker/CVE-2004-1268","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2005:013","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"http://www.cups.org/str.php?L1023","tags":["article"]},{"url":"http://www.cups.org/str.php?L1024","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=136973","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=143087","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=143566","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2005/rhsa-2005_013.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2004-1125","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1617371","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2004-1125","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2004-1125","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2004-1267","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1617400","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2004-1267","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2004-1267","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2004-1268","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1617401","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2004-1268","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2004-1269","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1617402","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2004-1269","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2004-1269","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2004-1270","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1617403","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2004-1270","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2004-1270","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2005:053","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=144191","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=144194","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=145088","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=147480","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2005/rhsa-2005_053.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2005-0064","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1617441","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2005-0064","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2005-0064","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2005-0206","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1617493","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2005-0206","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2005-0206","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2004-1268","description":"lppasswd in CUPS 1.1.22 ignores write errors when modifying the CUPS passwd file, which allows local users to corrupt the file by filling the associated file system and triggering the write errors.","status":"published","published":"2004-12-22T05:00:00Z","modified":"2024-08-08T00:46:12.268Z","updated_at":"2026-11-02T14:34:54.398187Z"}],"euvd":[{"id":"EUVD-2004-1265","description":"lppasswd in CUPS 1.1.22 ignores write errors when modifying the CUPS passwd file, which allows local users to corrupt the file by filling the associated file system and triggering the write errors.","status":"published","published":"2004-12-22T05:00:00Z","modified":"2024-08-08T00:46:12Z","updated_at":"2026-11-03T01:15:15.601329Z"}],"ghsa":[{"id":"GHSA-7rhq-w6x9-x4gf","title":"lppasswd in CUPS 1.1.22 ignores write errors when modifying the CUPS passwd file, which allows...","description":"lppasswd in CUPS 1.1.22 ignores write errors when modifying the CUPS passwd file, which allows local users to corrupt the file by filling the associated file system and triggering the write errors.","status":"published","published":"2022-04-29T02:59:14Z","modified":"2025-04-03T04:08:30Z","updated_at":"2026-11-02T15:00:41.179225Z"}],"nvd":[{"id":"CVE-2004-1268","description":"lppasswd in CUPS 1.1.22 ignores write errors when modifying the CUPS passwd file, which allows local users to corrupt the file by filling the associated file system and triggering the write errors.","status":"published","published":"2005-01-10T05:00:00Z","modified":"2026-06-16T22:07:22Z","cvss":[{"version":"2.0","score":2.1,"vector":"AV:L/AC:L/Au:N/C:N/I:P/A:N","level":"low","assessor":"primary"}],"updated_at":"2026-11-02T14:00:53.133049Z"}],"osv":[{"id":"CVE-2004-1268","description":"lppasswd in CUPS 1.1.22 ignores write errors when modifying the CUPS passwd file, which allows local users to corrupt the file by filling the associated file system and triggering the write errors.","status":"published","published":"2005-01-10T05:00:00Z","modified":"2026-04-10T03:36:34.612098Z","updated_at":"2026-11-02T15:43:56.315348Z"},{"id":"DEBIAN-CVE-2004-1268","description":"lppasswd in CUPS 1.1.22 ignores write errors when modifying the CUPS passwd file, which allows local users to corrupt the file by filling the associated file system and triggering the write errors.","status":"published","published":"2005-01-10T05:00:00Z","modified":"2026-10-21T15:47:21.840214625Z","updated_at":"2026-11-02T15:45:22.55978Z"},{"id":"RHSA-2005:013","title":"Red Hat Security Advisory: cups security update","status":"published","published":"2024-09-15T15:02:33Z","modified":"2026-06-26T10:01:56Z","updated_at":"2026-11-02T15:52:59.135214Z"},{"id":"RHSA-2005:053","title":"Red Hat Security Advisory: CUPS security update","status":"published","published":"2024-09-15T15:05:58Z","modified":"2026-06-26T10:02:06Z","updated_at":"2026-11-02T15:52:59.135214Z"}]}}