CVE-2013-0200

2013-03-0620:55:00

CWE-59

[email protected]

web.nvd.nist.gov

hplip

symlink attack

local file overwrite

cve-2013-0200

nvd

linux

printing

5.9 Medium

AI Score

Confidence

Low

1.9 Low

CVSS2

Access Vector

LOCAL

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:L/AC:M/Au:N/C:N/I:P/A:N

0.0004 Low

EPSS

Percentile

5.2%

JSON

HP Linux Imaging and Printing (HPLIP) through 3.12.4 allows local users to overwrite arbitrary files via a symlink attack on the (1) /tmp/hpcupsfilterc_#.bmp, (2) /tmp/hpcupsfilterk_#.bmp, (3) /tmp/hpcups_job#.out, (4) /tmp/hpijs_#####.out, or (5) /tmp/hpps_job#.out temporary file, a different vulnerability than CVE-2011-2722.

CPENameOperatorVersion
hp:linux_imaging_and_printing_projecthp linux imaging and printing projecteq3.9.6
hp:linux_imaging_and_printing_projecthp linux imaging and printing projecteq3.10.6
hp:linux_imaging_and_printing_projecthp linux imaging and printing projecteq3.11.1
hp:linux_imaging_and_printing_projecthp linux imaging and printing projecteq3.11.3a
hp:linux_imaging_and_printing_projecthp linux imaging and printing projecteq3.9.4b
hp:linux_imaging_and_printing_projecthp linux imaging and printing projecteq3.9.12
hp:linux_imaging_and_printing_projecthp linux imaging and printing projecteq1.0
hp:linux_imaging_and_printing_projecthp linux imaging and printing projecteq2.7.10
hp:linux_imaging_and_printing_projecthp linux imaging and printing projecteq2.0
hp:linux_imaging_and_printing_projecthp linux imaging and printing projecteq3.9.4

CPE	Name	Operator	Version
hp:linux_imaging_and_printing_project	hp linux imaging and printing project	eq	3.9.6
hp:linux_imaging_and_printing_project	hp linux imaging and printing project	eq	3.10.6
hp:linux_imaging_and_printing_project	hp linux imaging and printing project	eq	3.11.1
hp:linux_imaging_and_printing_project	hp linux imaging and printing project	eq	3.11.3a
hp:linux_imaging_and_printing_project	hp linux imaging and printing project	eq	3.9.4b
hp:linux_imaging_and_printing_project	hp linux imaging and printing project	eq	3.9.12
hp:linux_imaging_and_printing_project	hp linux imaging and printing project	eq	1.0
hp:linux_imaging_and_printing_project	hp linux imaging and printing project	eq	2.7.10
hp:linux_imaging_and_printing_project	hp linux imaging and printing project	eq	2.0
hp:linux_imaging_and_printing_project	hp linux imaging and printing project	eq	3.9.4