CVEvulnerability
CVE-2004-0923
2.1 LOW
Official page ↗
- Status
- Modified
- Published
- 2005-01-27
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 2.1 LOW — AV:L/AC:L/Au:N/C:P/I:N/A:N
Description
CUPS 1.1.20 and earlier records authentication information for a device URI in the error_log file, which allows local users to obtain user names and passwords.
Affected configurations
• easy software products cups 1.0.4
• easy software products cups 1.0.4 8
• easy software products cups 1.1.1
• easy software products cups 1.1.4
• easy software products cups 1.1.4 2
• easy software products cups 1.1.4 3
• easy software products cups 1.1.4 5
• easy software products cups 1.1.6
• easy software products cups 1.1.7
• easy software products cups 1.1.10
• easy software products cups 1.1.12
• easy software products cups 1.1.13
• easy software products cups 1.1.14
• easy software products cups 1.1.15
• easy software products cups 1.1.16
• easy software products cups 1.1.17
• easy software products cups 1.1.18
• easy software products cups 1.1.19
• easy software products cups 1.1.19 rc5
• easy software products cups 1.1.20
• easy software products cups 1.1.21
• apple mac os x 10.2
• apple mac os x 10.2.1
• apple mac os x 10.2.2
• apple mac os x 10.2.3
• apple mac os x 10.2.4
• apple mac os x 10.2.5
• apple mac os x 10.2.6
• apple mac os x 10.2.7
• apple mac os x 10.2.8
• apple mac os x 10.3
• apple mac os x 10.3.1
• apple mac os x 10.3.2
• apple mac os x 10.3.3
• apple mac os x 10.3.4
• apple mac os x 10.3.5
• apple mac os x server 10.2
• apple mac os x server 10.2.1
• apple mac os x server 10.2.2
• apple mac os x server 10.2.3
• apple mac os x server 10.2.4
• apple mac os x server 10.2.5
• apple mac os x server 10.2.6
• apple mac os x server 10.2.7
• apple mac os x server 10.2.8
• apple mac os x server 10.3
• apple mac os x server 10.3.1
• apple mac os x server 10.3.2
• apple mac os x server 10.3.3
• apple mac os x server 10.3.4
• apple mac os x server 10.3.5
References
- http://lists.apple.com/archives/security-announce/2004/Oct/msg00000.html lists.apple.com
- http://www.ciac.org/ciac/bulletins/p-002.shtml www.ciac.org
- http://www.debian.org/security/2004/dsa-566 www.debian.org
- http://www.kb.cert.org/vuls/id/557062 Third Party Advisory, US Government Resource
- http://www.mandriva.com/security/advisories?name=MDKSA-2004:116 www.mandriva.com
- http://www.redhat.com/support/errata/RHSA-2004-543.html Patch, Vendor Advisory
- http://www.securityfocus.com/bid/11324 Patch, Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/17593 exchange.xforce.ibmcloud.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10710 oval.cisecurity.org
- http://lists.apple.com/archives/security-announce/2004/Oct/msg00000.html lists.apple.com
- http://www.ciac.org/ciac/bulletins/p-002.shtml www.ciac.org
- http://www.debian.org/security/2004/dsa-566 www.debian.org
- http://www.kb.cert.org/vuls/id/557062 Third Party Advisory, US Government Resource
- http://www.mandriva.com/security/advisories?name=MDKSA-2004:116 www.mandriva.com
- http://www.redhat.com/support/errata/RHSA-2004-543.html Patch, Vendor Advisory
- http://www.securityfocus.com/bid/11324 Patch, Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/17593 exchange.xforce.ibmcloud.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10710 oval.cisecurity.org