Beveiligingsadvies

CVE-2004-2154

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2005-07-05 04:00:00
Laatst bijgewerkt 2024-08-08 01:15:01
Toegewezen door redhat
CVSS-score 9.8
Status PUBLISHED

Beschrijving

CUPS before 1.1.21rc1 treats a Location directive in cupsd.conf as case sensitive, which allows attackers to bypass intended ACLs via a printer name containing uppercase or lowercase letters that are different from what is specified in the directive.