The vulnerability of the CentOS operating system allows a malicious attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the hplip-1.6.7 package of the CentOS operating system can lead to violations of confidentiality, integrity, and accessibility of protected information. Exploitation of this vulnerability can be carried out remotely...

The vulnerability of the CentOS operating system allows a malicious attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the hplip3-common-3.9.8 package of the CentOS operating system can lead to violations of confidentiality, integrity, and accessibility of protected information. Exploitation of this vulnerability can be carried out remotely...

The vulnerability of the CentOS operating system allows a malicious attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the hplip3-gui-3.9.8 package for the CentOS operating system can lead to violations of confidentiality, integrity, and accessibility of protected information. Exploitation of this vulnerability can be carried out remotely...

The vulnerability of the CentOS operating system allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the hplip-gui-3.12.4 package for the CentOS operating system can lead to violations of confidentiality, integrity, and accessibility of protected information. Exploitation of this vulnerability can be carried out locally...

The vulnerability of the CentOS operating system allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the hplip-libs-3.12.4 package of the CentOS operating system can lead to violations of confidentiality, integrity, and accessibility of protected information. Exploitation of this vulnerability can be carried out locally...

Vulnerabilities of the Gentoo Linux operating system, which allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information

The multiple vulnerabilities in the hplip package up to version 3.11.10 of the Gentoo Linux operating system can lead to violations of confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely...

Vulnerabilities of the Gentoo Linux operating system, which allow a malicious individual to compromise the confidentiality, integrity, and accessibility of protected information

The multiple vulnerabilities in the hplip package up to version 3.14.1 of the Gentoo Linux operating system can lead to violations of confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited locally...

Vulnerabilities in the Debian GNU/Linux operating system that allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information

The multiple vulnerabilities in the hplip-data package of the Debian GNU/Linux operating system may lead to breaches of the confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely...

PT-2015-3374

Name of the Vulnerable Software and Affected Versions HPLIP affected versions not specified Description The issue is related to the hp-plugin utility in HPLIP, which uses a short GPG key id from a keyserver to verify print plugin downloads. This makes it easier for man-in-the-middle attackers to...

Oracle Solaris Third-Party Patch Update : foomatic (multiple_vulnerabilities_in_foomatic)

The remote Solaris system is missing necessary patches to address security updates : - foomatic-rip-hplip in HP Linux Imaging and Printing HPLIP 3.11.5 allows remote attackers to execute arbitrary code via a crafted FoomaticRIPCommandLine field in a .ppd file. CVE-2011-2697 - foomaticrip.c in...

Oracle Solaris Third-Party Patch Update : hplip (cve_2013_0200_link_following)

The remote Solaris system is missing necessary patches to address security updates : - HP Linux Imaging and Printing HPLIP through 3.12.4 allows local users to overwrite arbitrary files via a symlink attack on the 1 /tmp/hpcupsfilterc .bmp, 2 /tmp/hpcupsfilterk.bmp, 3 /tmp/hpcupsjob.out, 4...

hplip hpssd.py From Address Arbitrary Command Execution

No description provided by source. $Id: hpliphpssdexec.rb 10617 2010-10-09 06:55:52Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of...

GLSA-201406-27 : polkit, Spice-Gtk, systemd, HPLIP, libvirt: Privilege escalation

The remote host is affected by the vulnerability described in GLSA-201406-27 polkit, Spice-Gtk, systemd, HPLIP, libvirt: Privilege escalation polkit has a race condition which potentially allows a process to change its UID/EUID via suid or pkexec before authentication is completed. Impact : A loc...

polkit, Spice-Gtk, systemd, HPLIP, libvirt: Privilege escalation

Background polkit is a toolkit for managing policies relating to unprivileged processes communicating with privileged processes. Description polkit has a race condition which potentially allows a process to change its UID/EUID via suid or pkexec before authentication is completed. Impact A local...

openSUSE Security Update : hplip (openSUSE-SU-2011:0950-1)

This update of hplip fixes : - CVE-2004-0801: CVSS v2 Base Score: 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P: This patch originally affected foomatic-rip in CUPS but was found to be in foomatic-rip-hplip too. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this...

openSUSE Security Update : hplip (openSUSE-SU-2014:0127-1)

fix-CVE-2013-6402.dif fixes hardcoded file name /tmp/hp-pkservice.log in pkit.py bnc852368. - disablehp-upgrade.patch disables hp-upgrade/upgrade.py for security reasons bnc853405. To upgrade HPLIP an openSUSE software package manager like YaST or zypper should be used. CVE-2013-6427...

openSUSE Security Update : hplip (openSUSE-SU-2011:0068-1)

Specially crafted SNMP replies could cause a buffer overflow in hplip's sane backend CVE-2010-4267. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update hplip-3814. The text description of this...

openSUSE Security Update : hplip (openSUSE-SU-2011:0950-1)

This update of hplip fixes : - CVE-2004-0801: CVSS v2 Base Score: 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P: This patch originally affected foomatic-rip in CUPS but was found to be in foomatic-rip-hplip too. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this...

openSUSE Security Update : hplip (openSUSE-SU-2013:1617-1)

the following security issue was fixed for HPLIP 3.13.10: usage of an insecure polkit DBUS API fix for bnc836937 and CVE-2013-4325 that are related to CVE-2013-4288 and bnc835827. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...

Code injection

HP Linux Imaging and Printing HPLIP before 3.13.2 uses world-writable permissions for /var/log/hp and /var/log/hp/tmp, which allows local users to delete log files via standard filesystem operations...