Easy Software Products LPPassWd CUPS Password File Error Message Injection Vulnerability

Bugtraq ID:	12007
Class:	Failure to Handle Exceptional Conditions
CVE:	CVE-2004-1268
Remote:	No
Local:	Yes
Published:	Dec 15 2004 12:00AM
Updated:	Jul 12 2009 09:26AM
Credit:	Discovery is credited to Bartlomiej Sieka.
Vulnerable:	SGI ProPack 3.0 S.u.S.E. Linux Personal 9.2 S.u.S.E. Linux Personal 9.1 S.u.S.E. Linux Personal 9.0 x86_64 S.u.S.E. Linux Personal 9.0 S.u.S.E. Linux Personal 8.2 S.u.S.E. Linux 8.1 S.u.S.E. Linux 8.0 i386 S.u.S.E. Linux 8.0 RedHat Linux 9.0 i386 RedHat Linux 7.3 i386 RedHat Enterprise Linux WS 3 RedHat Enterprise Linux ES 3 RedHat Desktop 3.0 Red Hat Fedora Core3 Red Hat Fedora Core2 Red Hat Fedora Core1 Red Hat Enterprise Linux AS 3 Gentoo Linux Easy Software Products lppasswd 1.1.22 Easy Software Products CUPS 1.1.22 rc1 Easy Software Products CUPS 1.1.20 + ALT Linux ALT Linux Compact 2.3 + ALT Linux ALT Linux Junior 2.3 + Gentoo Linux 1.4 _rc3 + Gentoo Linux 1.4 _rc2 + Gentoo Linux 1.4 _rc1 + MandrakeSoft apcupsd 2006.0 + Mandriva Linux Mandrake 10.0 AMD64 + Mandriva Linux Mandrake 10.0 + S.u.S.E. Linux Personal 9.1 + Ubuntu Ubuntu Linux 4.1 ppc + Ubuntu Ubuntu Linux 4.1 ia64 + Ubuntu Ubuntu Linux 4.1 ia32

Not Vulnerable: