CVE-2004-1268: lppasswd in CUPS 1.1.22 ignores write errors when modifying the CUPS passwd file, which allows local users...

Security readout for executives and security teams

This issue affects CUPS lppasswd in version 1.1.22. A local user could trigger write failures by filling the related filesystem, causing the CUPS password file to become corrupted. The main business risk is print authentication disruption or administrative cleanup, not remote takeover based on the provided sources. Exposure is most likely on legacy Unix/Linux systems running CUPS 1.1.22 or vendor packages covered by the listed 2004-2005 advisories. Systems without local untrusted users, without CUPS password use, or running modern maintained CUPS packages are less likely exposed. Prioritize this for legacy print servers or multi-user Unix/Linux environments. It is not presented as internet-exploitable, but corrupted print authentication data can cause operational disruption and require manual recovery. Mitigation focus: Check the listed vendor advisories for the applicable fixed CUPS package.; Upgrade or retire systems still running CUPS 1.1.22-era packages.; Limit local shell access on print servers to trusted administrators..

Prepared

Jun 30, 2026, 01:53 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.