PT-2013-1081 · Hewlett Packard+3 · Hplip+3

Tim Waugh

·

Publicado

2013-02-20

·

Atualizado

2023-02-13

·

CVE-2013-0200

CVSS v2.0

6.9

Média

VetorAV:L/AC:M/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions HP Linux Imaging and Printing (HPLIP) versions 3.12.4 and earlier
Description The issue allows local users to overwrite arbitrary files via a symlink attack on temporary files, potentially leading to disruption of confidentiality, integrity, and availability of protected information. A local attacker can exploit this to cause harm.
Recommendations For HP Linux Imaging and Printing (HPLIP) versions 3.12.4 and earlier, consider restricting access to the temporary files /tmp/hpcupsfilterc #.bmp, /tmp/hpcupsfilterk #.bmp, /tmp/hpcups job#.out, /tmp/hpijs #####.out, and /tmp/hpps job#.out to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Link Following

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-59

Identificadores relacionados

BDU:2015-02622
CESA-2013_0500
CVE-2013-0200
DSA-2829-1
RHSA-2013:0500
RHSA-2013_0500
SUSE-SU-2014_0188-1
SUSE-SU-2014_0188-2

Produtos afetados

Centos
Hplip
Red Hat
Suse