CVE-2008-2940

CVE-2008-2940 affects HP Linux Imaging and Printing (HPLIP) 1.6.7. The vulnerability lies in the alert-mailing functionality, allowing a local attacker to gain privileges and send e-mail messages from the root account by sending crafted packets, with root emails triggered by the alert mechanism a...

CVE-2013-0200

CVE-2013-0200 affects HP Linux Imaging and Printing (HPLIP) up to version 3.12.4. The vulnerability allows local attackers to overwrite arbitrary files via a symlink attack on temporary files such as /tmp/hpcupsfilterc_#.bmp, /tmp/hpcupsfilterk_#.bmp, /tmp/hpcups_job#.out, /tmp/hpijs_#####.out, o...

CVE-2010-4267

CVE-2010-4267 affects the Hewlett-Packard Linux Imaging and Printing (HPLIP) project, specifically the hpmud_get_pml function in io/hpmud/pml.c. The stack-based buffer overflow is exploitable by remote attackers via a crafted SNMP response with a large length value, allowing a denial of service a...

CVE-2013-4325

CVE-2013-4325 affects HP Linux Printing and Imaging (HPLIP) up to version 3.13.9, where a Polkit race between PolkitUnixProcess and a polkit authority can allow a local user to bypass access restrictions via a setuid process or pkexec. Related advisories/bulletins indicate the fix requires upgrad...

CVE-2011-2722

CVE-2011-2722 : In HP Linux Imaging and Printing (HPLIP) 3.x before 3.11.10, the send_data_to_stdout path in prnt/hpijs/hpcupsfax.cpp allows local users to overwrite arbitrary files via a symlink attack on /tmp/hpcupsfax.out. This yields a local, low–to–moderate impact with possible partial integ...

CVE-2007-5208

CVE-2007-5208 affects the HP Linux Imaging and Printing Project (HPLIP) hpssd daemon. Affected: hplip 1.x and 2.x before 2.7.10. Description from multiple sources indicates that input handling of the From address during sendmail invocation allows context-dependent attackers to execute arbitrary c...

CVE-2013-6402

CVE-2013-6402 affects HP HPLIP (base/pkit.py) up through 3.13.11, enabling local attackers to overwrite arbitrary files via a symlink attack on /tmp/hp-pkservice.log. Connected advisories confirm a fix was released in multiple distributions (openSUSE, Mageia, etc.) and instruct upgrading HPLIP pa...

CVE-2011-2697

CVE-2011-2697 affects foomatic-rip-hplip in HP Linux Imaging and Printing (HPLIP) 3.11.5. A remote attacker can trigger arbitrary code execution via a crafted FoomaticRIPCommandLine field in a .ppd file due to an input sanitization flaw in the r ip filter. Impact is remote code execution with the...

CVE-2013-6427

The CVE-2013-6427 vulnerability affects HP Linux Imaging and Printing (HPLIP) with the hp-upgrade service in 3.x up to 3.13.11, where upgrade.py launches a program from an http URL, enabling a man-in-the-middle attacker to execute arbitrary code by controlling the client–server data stream. Open-...

CVE-2008-2941

CVE-2008-2941 is tied to the hpssd message parser in HP Linux Imaging and Printing (HPLIP) 1.6.7. A local attacker can cause a denial of service by sending specially crafted packets to TCP port 2207, stopping the hpssd process. The issue is documented across multiple advisories (e.g., RHSA-2008:0...

CVE-2012-6108

HP Linux Imaging and Printing (HPLIP) before 3.13.2 uses world-writable permissions on /var/log/hp and /var/log/hp/tmp, enabling local users to delete log files via standard filesystem operations. Affected product: HPLIP; root cause: improper permissions on log directories. Practical impact: loca...