Read the docs
TI-2004-01148 Aliases CVE-2004-1270GHSA-hxq6-gg87-xqc4

lppasswd in CUPS 1.1.22, when run in environments that do not ensure that file…

Priority LOW 12Published · Updated

Key facts

Attack vector
Local
Privileges required
None
User interaction
— Not recorded in CVSS 2.0
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
None · Partial · None
Fix status
Fixed

Attack profile from CVSS 2.0 · NVD. Fix status from CNA and Red Hat.

Summary

lppasswd in CUPS 1.1.22, when run in environments that do not ensure that file descriptors 0, 1, and 2 are open when lppasswd is called, does not verify that the passwd.new file is different from STDERR, which allows local users to control output to passwd.new via certain user input that triggers an error message.

Why it matters now

EPSS 0.00454 39th percentileScored 2026-11-07
Public exploit Yes 1 exploit referenceTagged by NVD
Fix Fixed Red Hat: 2 advisories

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 24

CPEVersionsRoleVendor
cpe:2.3:a:easy_software_products:cups:1.0.4:*:*:*:*:*:*:*1.0.4VulnerableEasy Software Products
cpe:2.3:a:easy_software_products:cups:1.0.4_8:*:*:*:*:*:*:*1.0.4_8VulnerableEasy Software Products
cpe:2.3:a:easy_software_products:cups:1.1.1:*:*:*:*:*:*:*1.1.1VulnerableEasy Software Products
cpe:2.3:a:easy_software_products:cups:1.1.4:*:*:*:*:*:*:*1.1.4VulnerableEasy Software Products
cpe:2.3:a:easy_software_products:cups:1.1.4_2:*:*:*:*:*:*:*1.1.4_2VulnerableEasy Software Products
cpe:2.3:a:easy_software_products:cups:1.1.4_3:*:*:*:*:*:*:*1.1.4_3VulnerableEasy Software Products
cpe:2.3:a:easy_software_products:cups:1.1.4_5:*:*:*:*:*:*:*1.1.4_5VulnerableEasy Software Products
cpe:2.3:a:easy_software_products:cups:1.1.6:*:*:*:*:*:*:*1.1.6VulnerableEasy Software Products
cpe:2.3:a:easy_software_products:cups:1.1.7:*:*:*:*:*:*:*1.1.7VulnerableEasy Software Products
cpe:2.3:a:easy_software_products:cups:1.1.10:*:*:*:*:*:*:*1.1.10VulnerableEasy Software Products
Show 14 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:easy_software_products:cups:1.1.12:*:*:*:*:*:*:*1.1.12VulnerableEasy Software Products
cpe:2.3:a:easy_software_products:cups:1.1.13:*:*:*:*:*:*:*1.1.13VulnerableEasy Software Products
cpe:2.3:a:easy_software_products:cups:1.1.14:*:*:*:*:*:*:*1.1.14VulnerableEasy Software Products
cpe:2.3:a:easy_software_products:cups:1.1.15:*:*:*:*:*:*:*1.1.15VulnerableEasy Software Products
cpe:2.3:a:easy_software_products:cups:1.1.16:*:*:*:*:*:*:*1.1.16VulnerableEasy Software Products
cpe:2.3:a:easy_software_products:cups:1.1.17:*:*:*:*:*:*:*1.1.17VulnerableEasy Software Products
cpe:2.3:a:easy_software_products:cups:1.1.18:*:*:*:*:*:*:*1.1.18VulnerableEasy Software Products
cpe:2.3:a:easy_software_products:cups:1.1.19:*:*:*:*:*:*:*1.1.19VulnerableEasy Software Products
cpe:2.3:a:easy_software_products:cups:1.1.19_rc5:*:*:*:*:*:*:*1.1.19_rc5VulnerableEasy Software Products
cpe:2.3:a:easy_software_products:cups:1.1.20:*:*:*:*:*:*:*1.1.20VulnerableEasy Software Products
cpe:2.3:a:easy_software_products:cups:1.1.21:*:*:*:*:*:*:*1.1.21VulnerableEasy Software Products
cpe:2.3:a:easy_software_products:cups:1.1.22_rc1:*:*:*:*:*:*:*1.1.22_rc1VulnerableEasy Software Products
cpe:2.3:o:redhat:fedora_core:core_2.0:*:*:*:*:*:*:*core_2.0VulnerableRed Hat
cpe:2.3:o:redhat:fedora_core:core_3.0:*:*:*:*:*:*:*core_3.0VulnerableRed Hat
  • cpe:2.3:a:easy_software_products:cups:1.1.12:*:*:*:*:*:*:* Versions 1.1.12 Vulnerable ·Easy Software Products
  • cpe:2.3:a:easy_software_products:cups:1.1.13:*:*:*:*:*:*:* Versions 1.1.13 Vulnerable ·Easy Software Products
  • cpe:2.3:a:easy_software_products:cups:1.1.14:*:*:*:*:*:*:* Versions 1.1.14 Vulnerable ·Easy Software Products
  • cpe:2.3:a:easy_software_products:cups:1.1.15:*:*:*:*:*:*:* Versions 1.1.15 Vulnerable ·Easy Software Products
  • cpe:2.3:a:easy_software_products:cups:1.1.16:*:*:*:*:*:*:* Versions 1.1.16 Vulnerable ·Easy Software Products
  • cpe:2.3:a:easy_software_products:cups:1.1.17:*:*:*:*:*:*:* Versions 1.1.17 Vulnerable ·Easy Software Products
  • cpe:2.3:a:easy_software_products:cups:1.1.18:*:*:*:*:*:*:* Versions 1.1.18 Vulnerable ·Easy Software Products
  • cpe:2.3:a:easy_software_products:cups:1.1.19:*:*:*:*:*:*:* Versions 1.1.19 Vulnerable ·Easy Software Products
  • cpe:2.3:a:easy_software_products:cups:1.1.19_rc5:*:*:*:*:*:*:* Versions 1.1.19_rc5 Vulnerable ·Easy Software Products
  • cpe:2.3:a:easy_software_products:cups:1.1.20:*:*:*:*:*:*:* Versions 1.1.20 Vulnerable ·Easy Software Products
  • cpe:2.3:a:easy_software_products:cups:1.1.21:*:*:*:*:*:*:* Versions 1.1.21 Vulnerable ·Easy Software Products
  • cpe:2.3:a:easy_software_products:cups:1.1.22_rc1:*:*:*:*:*:*:* Versions 1.1.22_rc1 Vulnerable ·Easy Software Products
  • cpe:2.3:o:redhat:fedora_core:core_2.0:*:*:*:*:*:*:* Versions core_2.0 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:fedora_core:core_3.0:*:*:*:*:*:*:* Versions core_3.0 Vulnerable ·Red Hat

Remediation

Red Hat 2 advisories

  • RHSA-2005:053 Released 2005-02-15 · Red Hat rating Important
    CUPS security update
    • Red Hat Enterprise Linux AS version 4 cups-1:1.1.22-0.rc1.9.6, cups-1:1.1.22-0.rc1.9.6.i386, cups-1:1.1.22-0.rc1.9.6.ia64 +9
    • Red Hat Enterprise Linux Desktop version 4 cups-1:1.1.22-0.rc1.9.6, cups-1:1.1.22-0.rc1.9.6.i386, cups-devel-1:1.1.22-0.rc1.9.6 +3
    • Red Hat Enterprise Linux ES version 4 cups-1:1.1.22-0.rc1.9.6, cups-1:1.1.22-0.rc1.9.6.i386, cups-1:1.1.22-0.rc1.9.6.ia64 +6
    • Red Hat Enterprise Linux WS version 4 cups-1:1.1.22-0.rc1.9.6, cups-1:1.1.22-0.rc1.9.6.i386, cups-1:1.1.22-0.rc1.9.6.ia64 +6
  • RHSA-2005:013 Released 2005-01-12 · Red Hat rating Important
    cups security update
    • Red Hat Desktop version 3 cups-1:1.1.17-13.3.22, cups-1:1.1.17-13.3.22.i386, cups-devel-1:1.1.17-13.3.22 +3
    • Red Hat Enterprise Linux AS version 3 cups-1:1.1.17-13.3.22, cups-1:1.1.17-13.3.22.i386, cups-1:1.1.17-13.3.22.ia64 +9
    • Red Hat Enterprise Linux ES version 3 cups-1:1.1.17-13.3.22, cups-1:1.1.17-13.3.22.i386, cups-1:1.1.17-13.3.22.ia64 +6
    • Red Hat Enterprise Linux WS version 3 cups-1:1.1.17-13.3.22, cups-1:1.1.17-13.3.22.i386, cups-1:1.1.17-13.3.22.ia64 +6

Vendor assessments

Red Hat

Red Hat rating: Important. Red Hat's page for this CVE →

ProductStatusPlan or fix
Red Hat Desktop version 3Fixed RHSA-2005:013
Red Hat Enterprise Linux AS version 3Fixed RHSA-2005:013
Red Hat Enterprise Linux AS version 4Fixed RHSA-2005:053
Red Hat Enterprise Linux Desktop version 4Fixed RHSA-2005:053
Red Hat Enterprise Linux ES version 3Fixed RHSA-2005:013
Red Hat Enterprise Linux ES version 4Fixed RHSA-2005:053
Red Hat Enterprise Linux WS version 3Fixed RHSA-2005:013
Red Hat Enterprise Linux WS version 4Fixed RHSA-2005:053

Timeline

  1. 2026-10-02 Threatist record created from CVE-2004-1270
  2. 2026-10-03 Alias added: GHSA-hxq6-gg87-xqc4

References

Exploit 1

Advisory 5

Other 1

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences