CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
AI Score
Confidence
Low
EPSS
Percentile
77.3%
It was discovered that the HPLIP Polkit daemon incorrectly handled
temporary files. A local attacker could possibly use this issue to
overwrite arbitrary files. In the default installation of Ubuntu 12.04 LTS
and higher, this should be prevented by the Yama link restrictions.
(CVE-2013-6402)
It was discovered that HPLIP contained an upgrade tool that would download
code in an unsafe fashion. If a remote attacker were able to perform a
machine-in-the-middle attack, this flaw could be exploited to execute arbitrary
code. (CVE-2013-6427)
OS | Version | Architecture | Package | Version | Filename |
---|---|---|---|---|---|
Ubuntu | 13.10 | noarch | hplip | < 3.13.9-1ubuntu0.1 | UNKNOWN |
Ubuntu | 13.10 | noarch | hplip-dbg | < 3.13.9-1ubuntu0.1 | UNKNOWN |
Ubuntu | 13.10 | noarch | libhpmud-dev | < 3.13.9-1ubuntu0.1 | UNKNOWN |
Ubuntu | 13.10 | noarch | libhpmud0 | < 3.13.9-1ubuntu0.1 | UNKNOWN |
Ubuntu | 13.10 | noarch | libsane-hpaio | < 3.13.9-1ubuntu0.1 | UNKNOWN |
Ubuntu | 13.10 | noarch | printer-driver-hpcups | < 3.13.9-1ubuntu0.1 | UNKNOWN |
Ubuntu | 13.10 | noarch | printer-driver-hpijs | < 3.13.9-1ubuntu0.1 | UNKNOWN |
Ubuntu | 12.10 | noarch | hplip | < 3.12.6-3ubuntu4.3 | UNKNOWN |
Ubuntu | 12.10 | noarch | hplip-dbg | < 3.12.6-3ubuntu4.3 | UNKNOWN |
Ubuntu | 12.10 | noarch | libhpmud-dev | < 3.12.6-3ubuntu4.3 | UNKNOWN |