Linux Imaging And Printing Project Security Vulnerabilities and Issues — Linux Imaging And Printing Project CVE List

Lucene search

HpLinux Imaging And Printing Project

11 matches found

CVE•added 2008/08/14 8:41 p.m.•79 views

CVE-2008-2940

The alert-mailing implementation in HP Linux Imaging and Printing (HPLIP) 1.6.7 allows local users to gain privileges and send e-mail messages from the root account via vectors related to the setalerts message, and lack of validation of the device URI associated with an event message.

7.2CVSS6.1AI score0.00044EPSS

CVE•added 2013/03/06 8:55 p.m.•76 views

CVE-2013-0200

HP Linux Imaging and Printing (HPLIP) through 3.12.4 allows local users to overwrite arbitrary files via a symlink attack on the (1) /tmp/hpcupsfilterc_#.bmp, (2) /tmp/hpcupsfilterk_#.bmp, (3) /tmp/hpcups_job#.out, (4) /tmp/hpijs_#####.out, or (5) /tmp/hpps_job#.out temporary file, a different vuln...

1.9CVSS6AI score0.00055EPSS

CVE•added 2014/01/05 8:55 p.m.•65 views

CVE-2013-6402

base/pkit.py in HP Linux Imaging and Printing (HPLIP) through 3.13.11 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/hp-pkservice.log temporary file.

2.1CVSS6.1AI score0.00068EPSS

CVE•added 2013/09/23 10:18 a.m.•61 views

CVE-2013-4325

The check_permission_v1 function in base/pkit.py in HP Linux Imaging and Printing (HPLIP) through 3.13.9 does not properly use D-Bus for communication with a polkit authority, which allows local users to bypass intended access restrictions by leveraging a PolkitUnixProcess PolkitSubject race condit...

6.9CVSS5.9AI score0.00065EPSS

CVE•added 2007/10/13 12:17 a.m.•59 views

CVE-2007-5208

hpssd in Hewlett-Packard Linux Imaging and Printing Project (hplip) 1.x and 2.x before 2.7.10 allows context-dependent attackers to execute arbitrary commands via shell metacharacters in a from address, which is not properly handled when invoking sendmail.

7.6CVSS7AI score0.73524EPSS

CVE•added 2011/01/20 7:0 p.m.•58 views

CVE-2010-4267

Stack-based buffer overflow in the hpmud_get_pml function in io/hpmud/pml.c in Hewlett-Packard Linux Imaging and Printing (HPLIP) 1.6.7, 3.9.8, 3.10.9, and probably other versions allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted SNMP res...

7.5CVSS7.8AI score0.10217EPSS

CVE•added 2012/05/25 8:55 p.m.•57 views

CVE-2011-2722

The send_data_to_stdout function in prnt/hpijs/hpcupsfax.cpp in HP Linux Imaging and Printing (HPLIP) 3.x before 3.11.10 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/hpcupsfax.out temporary file.

1.2CVSS5.9AI score0.00034EPSS

CVE•added 2013/12/09 6:55 p.m.•57 views

CVE-2013-6427

upgrade.py in the hp-upgrade service in HP Linux Imaging and Printing (HPLIP) 3.x through 3.13.11 launches a program from an http URL, which allows man-in-the-middle attackers to execute arbitrary code by gaining control over the client-server data stream.

6.8CVSS7.2AI score0.00588EPSS

CVE•added 2011/07/29 8:55 p.m.•52 views

CVE-2011-2697

foomatic-rip-hplip in HP Linux Imaging and Printing (HPLIP) 3.11.5 allows remote attackers to execute arbitrary code via a crafted *FoomaticRIPCommandLine field in a .ppd file.

6.8CVSS5.8AI score0.01473EPSS

CVE•added 2008/08/14 8:41 p.m.•46 views

CVE-2008-2941

The hpssd message parser in hpssd.py in HP Linux Imaging and Printing (HPLIP) 1.6.7 allows local users to cause a denial of service (process stop) via a crafted packet, as demonstrated by sending "msg=0" to TCP port 2207.

4.9CVSS5.7AI score0.00036EPSS

CVE•added 2014/02/15 2:57 p.m.•30 views

CVE-2012-6108

HP Linux Imaging and Printing (HPLIP) before 3.13.2 uses world-writable permissions for /var/log/hp and /var/log/hp/tmp, which allows local users to delete log files via standard filesystem operations.

2.1CVSS6.5AI score0.00057EPSS