Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
ubuntuUbuntuUSN-2085-1
HistoryJan 21, 2014 - 12:00 a.m.

HPLIP vulnerabilities

2014-01-2100:00:00
ubuntu.com
31

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

7 High

AI Score

Confidence

Low

0.005 Low

EPSS

Percentile

77.3%

JSON

Releases

  • Ubuntu 13.10
  • Ubuntu 12.10
  • Ubuntu 12.04
  • Ubuntu 10.04

Packages

  • hplip - HP Linux Printing and Imaging System (HPLIP)

Details

It was discovered that the HPLIP Polkit daemon incorrectly handled
temporary files. A local attacker could possibly use this issue to
overwrite arbitrary files. In the default installation of Ubuntu 12.04 LTS
and higher, this should be prevented by the Yama link restrictions.
(CVE-2013-6402)

It was discovered that HPLIP contained an upgrade tool that would download
code in an unsafe fashion. If a remote attacker were able to perform a
machine-in-the-middle attack, this flaw could be exploited to execute arbitrary
code. (CVE-2013-6427)

OSVersionArchitecturePackageVersionFilename
Ubuntu13.10noarchhplip< 3.13.9-1ubuntu0.1UNKNOWN
Ubuntu13.10noarchhplip-dbg< 3.13.9-1ubuntu0.1UNKNOWN
Ubuntu13.10noarchlibhpmud-dev< 3.13.9-1ubuntu0.1UNKNOWN
Ubuntu13.10noarchlibhpmud0< 3.13.9-1ubuntu0.1UNKNOWN
Ubuntu13.10noarchlibsane-hpaio< 3.13.9-1ubuntu0.1UNKNOWN
Ubuntu13.10noarchprinter-driver-hpcups< 3.13.9-1ubuntu0.1UNKNOWN
Ubuntu13.10noarchprinter-driver-hpijs< 3.13.9-1ubuntu0.1UNKNOWN
Ubuntu12.10noarchhplip< 3.12.6-3ubuntu4.3UNKNOWN
Ubuntu12.10noarchhplip-dbg< 3.12.6-3ubuntu4.3UNKNOWN
Ubuntu12.10noarchlibhpmud-dev< 3.12.6-3ubuntu4.3UNKNOWN
Rows per page:
1-10 of 271

Related

nessus 6
openvas 8
mageia 1
securityvulns 2
debian 1
nvd 2
ubuntucve 2
debiancve 2
prion 2
cve 2
cvelist 2
slackware 1
nessus
nessus
Mandriva Linux Security Advisory : hplip (MDVSA-2014:023)
2014-01-27 00:00:00
openSUSE Security Update : hplip (openSUSE-SU-2014:0127-1)
2014-06-13 00:00:00
Ubuntu 10.04 LTS / 12.04 LTS / 12.10 / 13.10 : hplip vulnerabilities (USN-2085-1)
2014-01-22 00:00:00
openvas
openvas
Ubuntu Update for hplip USN-2085-1
2014-01-27 00:00:00
Ubuntu: Security Advisory (USN-2085-1)
2014-01-27 00:00:00
Mageia: Security Advisory (MGASA-2014-0033)
2022-01-28 00:00:00
mageia
mageia
Updated hplip package fixes security vulnerabilities
2014-02-05 19:27:44
securityvulns
securityvulns
hplip multiple security vulnerabilities
2014-01-09 00:00:00
[SECURITY] [DSA 2829-1] hplip security update
2014-01-09 00:00:00
debian
debian
[SECURITY] [DSA 2829-1] hplip security update
2013-12-28 17:56:43
nvd
nvd
CVE-2013-6402
2014-01-05 20:55:04
CVE-2013-6427
2013-12-09 18:55:10
ubuntucve
ubuntucve
CVE-2013-6402
2014-01-05 00:00:00
CVE-2013-6427
2013-12-09 00:00:00
debiancve
debiancve
CVE-2013-6402
2014-01-05 20:55:04
CVE-2013-6427
2013-12-09 18:55:10
prion
prion
Arbitrary file deletion
2014-01-05 20:55:00
Spoofing
2013-12-09 18:55:00
cve
cve
CVE-2013-6402
2014-01-05 20:55:04
CVE-2013-6427
2013-12-09 18:55:10
cvelist
cvelist
CVE-2013-6402
2014-01-05 20:00:00
CVE-2013-6427
2013-12-09 18:00:00
slackware
slackware
[slackware-security] hplip
2013-12-06 04:51:59

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

7 High

AI Score

Confidence

Low

0.005 Low

EPSS

Percentile

77.3%

JSON
Related for USN-2085-1
nessus6openvas8mageia1securityvulns2debian1nvd2ubuntucve2debiancve2prion2cve2cvelist2slackware1