CVE-2004-2154
Fixed in a distro release EPSS 2%CVSS 9.8
CUPS before 1.1.21rc1 treats a Location directive in cupsd.conf as case sensitive, which allows attackers to bypass intended ACLs via a printer name containing uppercase or lowercase letters that are different from what is specified in the directive.
Products: apple cups, canonical ubuntu_linux
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian:12 | cups | 1.1.20final+rc1-1 |
| Debian:13 | cups | 1.1.20final+rc1-1 |
| Debian:14 | cups | 1.1.20final+rc1-1 |
| Red Hat:enterprise_linux:3 | cups | 1:1.1.17-13.3.29 |
| Red Hat:enterprise_linux:3 | cups-debuginfo | 1:1.1.17-13.3.29 |
| Red Hat:enterprise_linux:3 | cups-devel | 1:1.1.17-13.3.29 |
| Red Hat:enterprise_linux:3 | cups-libs | 1:1.1.17-13.3.29 |