CUPS before 1.1.21rc1 treats a Location directive in... · CVE-2004-2154 · GitHub Advisory Database · GitHub

CUPS before 1.1.21rc1 treats a Location directive in...

High severity Unreviewed Published Apr 29, 2022 to the GitHub Advisory Database • Updated Feb 24, 2024

Package

No package listed— Suggest a package

Affected versions

Unknown

Patched versions

Unknown

Description

CUPS before 1.1.21rc1 treats a Location directive in cupsd.conf as case sensitive, which allows attackers to bypass intended ACLs via a printer name containing uppercase or lowercase letters that are different from what is specified in the directive.

References

Published by the National Vulnerability Database

Dec 31, 2004

Published to the GitHub Advisory Database Apr 29, 2022

Last updated Feb 24, 2024