HPLIP vulnerability

2009-01-1300:00:00

ubuntu.com

6.9 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:C/I:C/A:C

6.3 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

5.1%

JSON

Releases

Ubuntu 7.10

Packages

hplip -

Details

It was discovered that an installation script in the HPLIP package would
change permissions on the hplip config files located in user’s home directories.
A local user could exploit this and change permissions on arbitrary files
upon an HPLIP installation or upgrade, which could lead to root privileges.

OSVersionArchitecturePackageVersionFilename
Ubuntu7.10noarchhplip< 2.7.7.dfsg.1-0ubuntu5.3UNKNOWN
Ubuntu7.10noarchhpijs< 2.7.7+2.7.7.dfsg.1-0ubuntu5.3UNKNOWN
Ubuntu7.10noarchhplip-dbg< 2.7.7.dfsg.1-0ubuntu5.3UNKNOWN

OS	Version	Architecture	Package	Version	Filename
Ubuntu	7.10	noarch	hplip	< 2.7.7.dfsg.1-0ubuntu5.3	UNKNOWN
Ubuntu	7.10	noarch	hpijs	< 2.7.7+2.7.7.dfsg.1-0ubuntu5.3	UNKNOWN
Ubuntu	7.10	noarch	hplip-dbg	< 2.7.7.dfsg.1-0ubuntu5.3	UNKNOWN