CVE-2004-1270: lppasswd in CUPS 1.1.22, when run in environments that do not ensure that file descriptors 0, 1, and 2 are...

Security readout for executives and security teams

CVE-2004-1270 is a legacy CUPS lppasswd issue affecting CUPS 1.1.22. In unusual local execution environments where standard file descriptors are not open, a local user may influence error output written to the CUPS password update file. This is not a remote internet-facing flaw based on the provided sources. Exposure is most likely on old Linux or Unix systems still running affected CUPS 1.1.22 packages and allowing local users to execute lppasswd. Modern supported distributions are unlikely to be exposed, but legacy appliances, print servers, and frozen images should be checked. Treat this as legacy hygiene unless vulnerable systems remain in production. It is local-only in the provided evidence, but affected print infrastructure can be operationally sensitive and often overlooked during patch audits. Mitigation focus: Inventory systems running CUPS or legacy lppasswd binaries.; Check vendor advisories for fixed package versions.; Update CUPS packages through the operating system vendor..

Prepared

Jun 30, 2026, 01:53 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.