Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 25

Export CSV
CVE-2013-0200

hplip: insecure temporary file handling flaws

HP Linux Imaging and Printing (HPLIP) through 3.12.4 allows local users to overwrite arbitrary files via a symlink attack on the (1) /tmp/hpcupsfilterc_#.bmp, (2) /tmp/hpcupsfilterk_#.bmp, (3) /tmp/hpcups_job#.out, (4) /tmp/hpijs_#####.out, or (5) /tmp/hpps_job#.out temporary file, a different vulnerability than CVE-2011-2722.

CVSS 2.0 · 1.9 Low EPSS < 1% KEV · Not listed
Vendors
Hp Redhat
Products
Linux Imaging And Printing Project Enterprise Linux
CVE-2012-6108

hplip: default permissions for /var/log/hp are too open

HP Linux Imaging and Printing (HPLIP) before 3.13.2 uses world-writable permissions for /var/log/hp and /var/log/hp/tmp, which allows local users to delete log files via standard filesystem operations.

CVSS 2.0 · 2.1 Low EPSS < 1% KEV · Not listed
Vendors
Hp
Products
Linux Imaging And Printing Project
CVE-2011-2722

hplip: insecure temporary file handling

The send_data_to_stdout function in prnt/hpijs/hpcupsfax.cpp in HP Linux Imaging and Printing (HPLIP) 3.x before 3.11.10 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/hpcupsfax.out temporary file.

CVSS 2.0 · 1.2 Low EPSS < 1% KEV · Not listed
Vendors
Hp Redhat
Products
Linux Imaging And Printing Project Enterprise Linux
CVE-2011-2697

foomatic: Improper sanitization of command line option in foomatic-rip

foomatic-rip-hplip in HP Linux Imaging and Printing (HPLIP) 3.11.5 allows remote attackers to execute arbitrary code via a crafted *FoomaticRIPCommandLine field in a .ppd file.

CVSS 2.0 · 6.8 Medium EPSS 10.8% KEV · Not listed
Vendors
Hp Redhat
Products
Linux Imaging And Printing Project Enterprise Linux
CVE-2010-4267

hplip: remote stack overflow vulnerability

Stack-based buffer overflow in the hpmud_get_pml function in io/hpmud/pml.c in Hewlett-Packard Linux Imaging and Printing (HPLIP) 1.6.7, 3.9.8, 3.10.9, and probably other versions allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted SNMP response with a large length value.

CVSS 2.0 · 7.5 High EPSS 10.8% KEV · Not listed
Vendors
Hp Redhat
Products
Linux Imaging And Printing Project Enterprise Linux