Search: Home Bugtraq Vulnerabilities Mailing Lists Jobs Tools Beta Programs

Easy Software Products LPPassWd CUPS Password File Truncation Vulnerability

Easy Software Products lppasswd is prone to a vulnerability that may let local attackers truncate the CUPS password file.

This issue occurs because the program ignores write errors. If a local attacker can fill up the drive or otherwise trigger a write error, it is possible that the operation of writing to the CUPS password file may be aborted.

The end result is that the CUPS password file may be truncated, likely causing a denial of service condition.







 

Privacy Statement
Copyright 2008, SecurityFocus