CVE ID:	CVE-2004-0923
Description:	CUPS 1.1.20 and earlier records authentication information for a device URI in the error_log file, which allows local users to obtain user names and passwords.
Test IDs:	1.3.6.1.4.1.25623.1.0.51156   1.3.6.1.4.1.25623.1.0.54697   1.3.6.1.4.1.25623.1.0.52347   1.3.6.1.4.1.25623.1.0.53257   1.3.6.1.4.1.25623.1.0.50414
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2004-0923 http://lists.apple.com/archives/security-announce/2004/Oct/msg00000.html Debian Security Information: DSA-566 (Google Search) http://www.debian.org/security/2004/dsa-566 http://www.mandriva.com/security/advisories?name=MDKSA-2004:116 RedHat Security Advisories: RHSA-2004:543 http://www.redhat.com/support/errata/RHSA-2004-543.html Computer Incident Advisory Center Bulletin: P-002 http://www.ciac.org/ciac/bulletins/p-002.shtml CERT/CC vulnerability note: VU#557062 http://www.kb.cert.org/vuls/id/557062 BugTraq ID: 11324 http://www.securityfocus.com/bid/11324 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:10710 XForce ISS Database: cups-password-disclosure(17593) http://xforce.iss.net/xforce/xfdb/17593

New User Registration Email: UserID: Passwd: Please email me your monthly newsletters, informing the latest services, improvements & surveys. Please email me a vulnerability test announcement whenever a new test is added.     Privacy

Registered User Login   UserID:     Passwd:     Forgot userid or passwd? Email/Userid: