610 matches found
FreeBSD Ports: hplip
The remote host is missing an update to the system as announced in the referenced advisory. VID 37940643-be1b-11dd-a578-0030843d3802 OpenVAS Vulnerability Test $ Description: Auto generated from VID 37940643-be1b-11dd-a578-0030843d3802 Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...
FreeBSD : hplip -- hpssd Denial of Service (37940643-be1b-11dd-a578-0030843d3802)
Secunia reports : A security issue has been reported in hplip, which can be exploited by malicious, local users to cause a DoS. The security issue is caused due to an error within hpssd.py when parsing certain requests. This can be exploited to crash the service by sending specially crafted...
USN-674-2: HPLIP vulnerabilities
USN-674-1 provided packages to fix vulnerabilities in HPLIP. Due to an internal archive problem, the updates for Ubuntu 7.10 would not install properly. This update provides fixed packages for Ubuntu 7.10. We apologize for the inconvenience. Original advisory details: It was discovered that the...
[USN-674-1] HPLIP vulnerabilities
=========================================================== Ubuntu Security Notice USN-674-1 November 19, 2008 hplip vulnerabilities CVE-2008-2940, CVE-2008-2941 =========================================================== A security issue affects the following Ubuntu releases: Ubuntu 6.06 LTS...
USN-674-1: HPLIP vulnerabilities
It was discovered that the hpssd tool of hplip did not validate privileges in the alert-mailing function. A local attacker could exploit this to gain privileges and send e-mail messages from the account of the hplip user. This update alters hplip behaviour by preventing users from setting alerts...
openSUSE 10 Security Update : hplip (hplip-5552)
This update of hplip does not allow to send alert mails as user anymore CVE-2008-2940 and fixes a denial-of-service defect CVE-2008-2941. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update...
SuSE 10 Security Update : hplip (ZYPP Patch Number 5556)
This update of hplip does not allow to send alert mails as user anymore CVE-2008-2940 and fixes a denial-of-service defect. CVE-2008-2941 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc...
Gentoo Security Advisory GLSA 200710-26 (hplip)
The remote host is missing updates announced in advisory GLSA 200710-26. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...
Gentoo Security Advisory GLSA 200710-26 (hplip)
The remote host is missing updates announced in advisory GLSA 200710-26. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
postfix security update
CentOS Errata and Security Advisory CESA-2008:0818 Updated hplip packages that fix various security issues are now available for Red Hat Enterprise Linux 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The hplip Hewlett-Packard Linux Imaging...
CVE-2008-2941
The hpssd message parser in hpssd.py in HP Linux Imaging and Printing HPLIP 1.6.7 allows local users to cause a denial of service process stop via a crafted packet, as demonstrated by sending "msg=0" to TCP port 2207...
CVE-2008-2941
The hpssd message parser in hpssd.py in HP Linux Imaging and Printing HPLIP 1.6.7 allows local users to cause a denial of service process stop via a crafted packet, as demonstrated by sending "msg=0" to TCP port 2207...
Code injection
The hpssd message parser in hpssd.py in HP Linux Imaging and Printing HPLIP 1.6.7 allows local users to cause a denial of service process stop via a crafted packet, as demonstrated by sending "msg=0" to TCP port 2207...
CVE-2008-2941
The hpssd message parser in hpssd.py in HP Linux Imaging and Printing HPLIP 1.6.7 allows local users to cause a denial of service process stop via a crafted packet, as demonstrated by sending "msg=0" to TCP port 2207...
CVE-2008-2941
The hpssd message parser in hpssd.py in HP Linux Imaging and Printing HPLIP 1.6.7 allows local users to cause a denial of service process stop via a crafted packet, as demonstrated by sending "msg=0" to TCP port 2207...
CVE-2008-2941
CVE-2008-2941 is tied to the hpssd message parser in HP Linux Imaging and Printing (HPLIP) 1.6.7. A local attacker can cause a denial of service by sending specially crafted packets to TCP port 2207, stopping the hpssd process. The issue is documented across multiple advisories (e.g., RHSA-2008:0...
CVE-2008-2940
CVE-2008-2940 affects HP Linux Imaging and Printing (HPLIP) 1.6.7. The vulnerability lies in the alert-mailing functionality, allowing a local attacker to gain privileges and send e-mail messages from the root account by sending crafted packets, with root emails triggered by the alert mechanism a...
CVE-2008-2941: Improper Input Validation
The hpssd message parser in hpssd.py in HP Linux Imaging and Printing HPLIP 1.6.7 allows local users to cause a denial of service process stop via a crafted packet, as demonstrated by sending "msg=0" to TCP port 2207...
hplip -- hpssd Denial of Service
Secunia reports: A security issue has been reported in hplip, which can be exploited by malicious, local users to cause a DoS. The security issue is caused due to an error within hpssd.py when parsing certain requests. This can be exploited to crash the service by sending specially crafted reques...
CVE-2008-2940: Undefined Security Weakness
The alert-mailing implementation in HP Linux Imaging and Printing HPLIP 1.6.7 allows local users to gain privileges and send e-mail messages from the root account via vectors related to the setalerts message, and lack of validation of the device URI associated with an event message...