CVE-2004-1270: Easy Software Products Cups

Low severity, CVSS 2.1. EPSS: 0.5% chance of exploitation in the next 30 days.

lppasswd in CUPS 1.1.22, when run in environments that do not ensure that file descriptors 0, 1, and 2 are open when lppasswd is called, does not verify that the passwd.new file is different from STDERR, which allows local users to control output to passwd.new via certain user input that triggers an error message.

Affected products

• Easy Software Products Cups: version 1.0.4 only; version 1.0.4_8 only; version 1.1.1 only; version 1.1.4 only; version 1.1.4_2 only; version 1.1.4_3 only; …
• Red Hat Fedora Core: version core_2.0 only; version core_3.0 only

Published 2005-01-10. Last modified 2026-06-16.