CVE-2002-1366

CUPS 1.1.14-1.1.17 - Arbitrary File Write via Race Condition

Title source: llm
STIX 2.1

Description

Common Unix Printing System (CUPS) 1.1.14 through 1.1.17 allows local users with lp privileges to create or overwrite arbitrary files via file race conditions, as demonstrated by ice-cream.

References (9)

Core 9
Core References
Third Party Advisory mailing-list x_refsource_vulnwatch
http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0117.html
Third Party Advisory vendor-advisory x_refsource_debian
http://www.debian.org/security/2003/dsa-232
Vendor Advisory vendor-advisory x_refsource_suse
http://www.novell.com/linux/security/advisories/2003_002_cups.html
Vendor Advisory x_refsource_misc
http://www.idefense.com/advisory/12.19.02.txt
Vendor Advisory vendor-advisory x_refsource_redhat
http://www.redhat.com/support/errata/RHSA-2002-295.html
Mailing List mailing-list x_refsource_bugtraq
http://marc.info/?l=bugtraq&m=104032149026670&w=2
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/10907
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/6435
Various Sources vendor-advisory x_refsource_mandrake
http://www.mandrakesoft.com/security/advisories?name=MDKSA-2003:001

Scores

EPSS 0.0033
EPSS Percentile 25.5%

Details

Status published
Products (11)
apple/mac_os_x 10.2
apple/mac_os_x 10.2.2
easy_software_products/cups 1.0.4
easy_software_products/cups 1.1.1
easy_software_products/cups 1.1.4
easy_software_products/cups 1.1.6
easy_software_products/cups 1.1.7
easy_software_products/cups 1.1.10
easy_software_products/cups 1.1.13
easy_software_products/cups 1.1.14
... and 1 more
Published Dec 26, 2002
Tracked Since Feb 18, 2026