CVE-2013-6402

CVE-2013-6402 affects HP HPLIP (base/pkit.py) up through 3.13.11, enabling local attackers to overwrite arbitrary files via a symlink attack on /tmp/hp-pkservice.log. Connected advisories confirm a fix was released in multiple distributions (openSUSE, Mageia, etc.) and instruct upgrading HPLIP pa...

CVE-2012-6108

HP Linux Imaging and Printing (HPLIP) before 3.13.2 uses world-writable permissions on /var/log/hp and /var/log/hp/tmp, enabling local users to delete log files via standard filesystem operations. Affected product: HPLIP; root cause: improper permissions on log directories. Practical impact: loca...