Scientific Linux Security Update : hplip on SL5.x i386/x86_64

Kees Cook discovered a flaw in the way the hplip hpssd daemon handled user input. A local attacker could send a specially crafted request to the hpssd daemon, possibly allowing them to run arbitrary commands as the root user. CVE-2007-5208. On Scientific Linux 5, the SELinux targeted policy for...

CentOS 5 : hplip (CESA-2007:0960)

An updated hplip package to correct a security flaw is now available for Red Hat Enterprise Linux 5. This update has been rated as having important security impact by the Red Hat Security Response Team. The hplip Hewlett-Packard Linux Imaging and Printing Project package provides drivers for HP...

Gentoo Security Advisory GLSA 200710-26 (hplip)

The remote host is missing updates announced in advisory GLSA 200710-26. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Fedora 7 : hplip-1.7.4a-6.fc7 (2007-2527)

This update fixes a vulnerability in the hpssd daemon. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...

GLSA-200710-26 : HPLIP: Privilege escalation

The remote host is affected by the vulnerability described in GLSA-200710-26 HPLIP: Privilege escalation Kees Cook from the Ubuntu Security team discovered that the hpssd daemon does not correctly validate user-supplied data before passing it to a 'popen3' call. Impact : A local attacker may be...

HP Linux Imaging and Printing System HPSSD Daemon Detection

The remote service is an hpssd daemon, a component of the HP Linux Imaging and Printing HPLIP System that provides various services to HPLIP client applications. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include"compat.inc"; if description scriptid2705...

HP Linux Imaging and Printing Project (hplip) hpssd from Address Command Injection

The version of the HP Linux Imaging and Printing System hpssd daemon on the remote host fails to sanitize user-supplied input before appending it to a commandline when calling sendmail. Using a specially crafted email address, an unauthenticated, remote attacker can leverage this issue to execute...