CVE-2004-1270 Other in n/a
Local attackers can manipulate CUPS password file output by exploiting unverified file descriptors, potentially corrupting authentication data.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2004-1270?
CVE-2004-1270 is a low-severity vulnerability in Redhat Fedora Core, published on 22 Dec 2004. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
lppasswd in CUPS 1.1.22, when run in environments that do not ensure that file descriptors 0, 1, and 2 are open when lppasswd is called, does not verify that the passwd.new file is different from STDERR, which allows local users to control output to passwd.new via certain user input that triggers an error message.
Which versions are affected by CVE-2004-1270?
It affects 2 products.
Products include Easy Software Products Cups, Redhat Fedora Core.
How do I fix CVE-2004-1270?
Apply the vendor's patch.
Is CVE-2004-1270 being exploited?
There is no known exploitation of CVE-2004-1270 in the wild and no public exploit code.
Other vulnerabilities in Redhat Fedora Core
Sources
Also known as DEBIAN-CVE-2004-1270, GHSA-hxq6-gg87-xqc4.