HP Linux Imaging and Printing (HPLIP) through 3.12.4 allows local users to overwrite arbitrary files via a symlink attack on the (1) /tmp/hpcupsfilterc_#.bmp, (2) /tmp/hpcupsfilterk_#.bmp, (3) /tmp/hpcups_job#.out, (4) /tmp/hpijs_#####.out, or (5) /tmp/hpps_job#.out temporary file, a different vulnerability than CVE-2011-2722.
OS | Version | Architecture | Package | Version | Filename |
---|---|---|---|---|---|
Debian | 12 | all | hplip | <Â 3.12.6-3.1 | hplip_3.12.6-3.1_all.deb |
Debian | 11 | all | hplip | <Â 3.12.6-3.1 | hplip_3.12.6-3.1_all.deb |
Debian | 10 | all | hplip | <Â 3.12.6-3.1 | hplip_3.12.6-3.1_all.deb |
Debian | 999 | all | hplip | <Â 3.12.6-3.1 | hplip_3.12.6-3.1_all.deb |
Debian | 13 | all | hplip | <Â 3.12.6-3.1 | hplip_3.12.6-3.1_all.deb |