CVE-2004-0923
Fixed in a distro release EPSS <1%
CUPS 1.1.20 and earlier records authentication information for a device URI in the error_log file, which allows local users to obtain user names and passwords.
Products: easy_software_products cups, apple mac_os_x, apple mac_os_x_server
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | cups | 1.1.20final+rc1-9 |
| Debian 13 | cups | 1.1.20final+rc1-9 |
| Debian 14 | cups | 1.1.20final+rc1-9 |
| Debian 3.0 | cupsys | 1.1.14-5woody7 |
| Red Hat Enterprise Linux 3 | cups | 1:1.1.17-13.3.16 |
| Red Hat Enterprise Linux 3 | cups-debuginfo | 1:1.1.17-13.3.16 |
| Red Hat Enterprise Linux 3 | cups-devel | 1:1.1.17-13.3.16 |
| Red Hat Enterprise Linux 3 | cups-libs | 1:1.1.17-13.3.16 |