Launchpad.net

CVE 2004-0923

CUPS 1.1.20 and earlier records authentication information for a device URI in the error_log file, which allows local users to obtain user names and passwords.

See the CVE page on Mitre.org for more details.