Lucene search

K
ubuntucveUbuntu.comUB:CVE-2009-0122
HistoryJan 15, 2009 - 12:00 a.m.

CVE-2009-0122

2009-01-1500:00:00
ubuntu.com
ubuntu.com
8

CVSS2

6.9

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:C/I:C/A:C

EPSS

0

Percentile

5.1%

hplip.postinst in HP Linux Imaging and Printing (HPLIP) 2.7.7 and 2.8.2 on
Ubuntu allows local users to change the ownership of arbitrary files via
unspecified manipulations in advance of an HPLIP installation or upgrade by
an administrator, related to the product’s attempt to correct the ownership
of its configuration files within home directories.

Notes

Author Note
mdeslaur only affected gutsy
OSVersionArchitecturePackageVersionFilename
ubuntu7.10noarchhplip< 2.7.7.dfsg.1-0ubuntu5.3UNKNOWN

CVSS2

6.9

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:C/I:C/A:C

EPSS

0

Percentile

5.1%