PT-2013-1081 · Hewlett Packard+3 · Hplip+3

Tim Waugh

·

Published

2013-02-20

·

Updated

2023-02-13

·

CVE-2013-0200

CVSS v2.0

6.9

Medium

VectorAV:L/AC:M/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions HP Linux Imaging and Printing (HPLIP) versions 3.12.4 and earlier
Description The issue allows local users to overwrite arbitrary files via a symlink attack on temporary files, potentially leading to disruption of confidentiality, integrity, and availability of protected information. A local attacker can exploit this to cause harm.
Recommendations For HP Linux Imaging and Printing (HPLIP) versions 3.12.4 and earlier, consider restricting access to the temporary files /tmp/hpcupsfilterc #.bmp, /tmp/hpcupsfilterk #.bmp, /tmp/hpcups job#.out, /tmp/hpijs #####.out, and /tmp/hpps job#.out to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Link Following

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-59

Related Identifiers

BDU:2015-02622
CESA-2013_0500
CVE-2013-0200
DSA-2829-1
RHSA-2013:0500
RHSA-2013_0500
SUSE-SU-2014_0188-1
SUSE-SU-2014_0188-2

Affected Products

Centos
Hplip
Red Hat
Suse