Arbitrary file deletion

2014-01-0520:55:00

PRIOn knowledge base

www.prio-n.com

6.6 Medium

AI Score

Confidence

Low

2.1 Low

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:L/AC:L/Au:N/C:N/I:P/A:N

0.0004 Low

EPSS

Percentile

5.2%

JSON

base/pkit.py in HP Linux Imaging and Printing (HPLIP) through 3.13.11 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/hp-pkservice.log temporary file.

CPENameOperatorVersion
linux_imaging_and_printing_projectle3.13.11
linux_imaging_and_printing_projecteq3.9.6
linux_imaging_and_printing_projecteq3.10.6
linux_imaging_and_printing_projecteq3.13.2
linux_imaging_and_printing_projecteq3.12.10
linux_imaging_and_printing_projecteq3.13.4
linux_imaging_and_printing_projecteq3.11.1
linux_imaging_and_printing_projecteq3.13.9
linux_imaging_and_printing_projecteq3.13.7
linux_imaging_and_printing_projecteq3.11.397

Name	Operator	Version
linux_imaging_and_printing_project	le	3.13.11
linux_imaging_and_printing_project	eq	3.9.6
linux_imaging_and_printing_project	eq	3.10.6
linux_imaging_and_printing_project	eq	3.13.2
linux_imaging_and_printing_project	eq	3.12.10
linux_imaging_and_printing_project	eq	3.13.4
linux_imaging_and_printing_project	eq	3.11.1
linux_imaging_and_printing_project	eq	3.13.9
linux_imaging_and_printing_project	eq	3.13.7
linux_imaging_and_printing_project	eq	3.11.397