Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2013-6427HistoryDec 09, 2013 - 6:55 p.m.
CVE-2013-6427
2013-12-0918:55:10
Debian Security Bug Tracker
security-tracker.debian.org
10
6.8 Medium
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
0.005 Low
EPSS
Percentile
77.2%
upgrade.py in the hp-upgrade service in HP Linux Imaging and Printing (HPLIP) 3.x through 3.13.11 launches a program from an http URL, which allows man-in-the-middle attackers to execute arbitrary code by gaining control over the client-server data stream.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 12 | all | hplip | < 3.13.11-2 | hplip_3.13.11-2_all.deb |
| Debian | 11 | all | hplip | < 3.13.11-2 | hplip_3.13.11-2_all.deb |
| Debian | 10 | all | hplip | < 3.13.11-2 | hplip_3.13.11-2_all.deb |
| Debian | 999 | all | hplip | < 3.13.11-2 | hplip_3.13.11-2_all.deb |
| Debian | 13 | all | hplip | < 3.13.11-2 | hplip_3.13.11-2_all.deb |
Related
openvas
openvas
Slackware: Security Advisory (SSA:2013-339-04)
2022-04-21 00:00:00
Ubuntu Update for hplip USN-2085-1
2014-01-27 00:00:00
Ubuntu: Security Advisory (USN-2085-1)
2014-01-27 00:00:00
cvelist
cvelist
CVE-2013-6427
2013-12-09 18:00:00
ubuntucve
ubuntucve
CVE-2013-6427
2013-12-09 00:00:00
nessus
nessus
Slackware 14.0 : hplip (SSA:2013-339-04)
2013-12-06 00:00:00
Mandriva Linux Security Advisory : hplip (MDVSA-2014:023)
2014-01-27 00:00:00
openSUSE Security Update : hplip (openSUSE-SU-2014:0127-1)
2014-06-13 00:00:00
cve
cve
CVE-2013-6427
2013-12-09 18:55:10
nvd
nvd
CVE-2013-6427
2013-12-09 18:55:10
prion
prion
Spoofing
2013-12-09 18:55:00
slackware
slackware
[slackware-security] hplip
2013-12-06 04:51:59
ubuntu
ubuntu
HPLIP vulnerabilities
2014-01-21 00:00:00
mageia
mageia
Updated hplip package fixes security vulnerabilities
2014-02-05 19:27:44
securityvulns
securityvulns
[SECURITY] [DSA 2829-1] hplip security update
2014-01-09 00:00:00
hplip multiple security vulnerabilities
2014-01-09 00:00:00
debian
debian
[SECURITY] [DSA 2829-1] hplip security update
2013-12-28 17:57:19
6.8 Medium
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
0.005 Low
EPSS
Percentile
77.2%
Related for DEBIANCVE:CVE-2013-6427