Lucene search

[email protected]CVE-2011-2722

HistoryMay 25, 2012 - 8:55 p.m.

CVE-2011-2722

2012-05-2520:55:01

CWE-59

[email protected]

web.nvd.nist.gov

cve-2011-2722

security

hplip

file overwrite

symlink attack

nvd

1.2 Low

CVSS2

Attack Vector

LOCAL

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:L/AC:H/Au:N/C:N/I:P/A:N

5.9 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

5.1%

JSON

The send_data_to_stdout function in prnt/hpijs/hpcupsfax.cpp in HP Linux Imaging and Printing (HPLIP) 3.x before 3.11.10 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/hpcupsfax.out temporary file.

Affected configurations

NVD

Node

hplinux_imaging_and_printing_projectRange≤3.11.5

hplinux_imaging_and_printing_projectMatch3.9.2

hplinux_imaging_and_printing_projectMatch3.9.4

hplinux_imaging_and_printing_projectMatch3.9.4b

hplinux_imaging_and_printing_projectMatch3.9.6

hplinux_imaging_and_printing_projectMatch3.9.8

hplinux_imaging_and_printing_projectMatch3.9.10

hplinux_imaging_and_printing_projectMatch3.9.12

hplinux_imaging_and_printing_projectMatch3.10.2

hplinux_imaging_and_printing_projectMatch3.10.5

hplinux_imaging_and_printing_projectMatch3.10.6

hplinux_imaging_and_printing_projectMatch3.10.9

hplinux_imaging_and_printing_projectMatch3.11.1

hplinux_imaging_and_printing_projectMatch3.11.3

hplinux_imaging_and_printing_projectMatch3.11.3a

hplinux_imaging_and_printing_projectMatch3.11.7

CPENameOperatorVersion
hp:linux_imaging_and_printing_projecthp linux imaging and printing projectle3.11.5
hp:linux_imaging_and_printing_projecthp linux imaging and printing projecteq3.9.2
hp:linux_imaging_and_printing_projecthp linux imaging and printing projecteq3.9.4
hp:linux_imaging_and_printing_projecthp linux imaging and printing projecteq3.9.4b
hp:linux_imaging_and_printing_projecthp linux imaging and printing projecteq3.9.6
hp:linux_imaging_and_printing_projecthp linux imaging and printing projecteq3.9.8
hp:linux_imaging_and_printing_projecthp linux imaging and printing projecteq3.9.10
hp:linux_imaging_and_printing_projecthp linux imaging and printing projecteq3.9.12
hp:linux_imaging_and_printing_projecthp linux imaging and printing projecteq3.10.2
hp:linux_imaging_and_printing_projecthp linux imaging and printing projecteq3.10.5

CPE	Name	Operator	Version
hp:linux_imaging_and_printing_project	hp linux imaging and printing project	le	3.11.5
hp:linux_imaging_and_printing_project	hp linux imaging and printing project	eq	3.9.2
hp:linux_imaging_and_printing_project	hp linux imaging and printing project	eq	3.9.4
hp:linux_imaging_and_printing_project	hp linux imaging and printing project	eq	3.9.4b
hp:linux_imaging_and_printing_project	hp linux imaging and printing project	eq	3.9.6
hp:linux_imaging_and_printing_project	hp linux imaging and printing project	eq	3.9.8
hp:linux_imaging_and_printing_project	hp linux imaging and printing project	eq	3.9.10
hp:linux_imaging_and_printing_project	hp linux imaging and printing project	eq	3.9.12
hp:linux_imaging_and_printing_project	hp linux imaging and printing project	eq	3.10.2
hp:linux_imaging_and_printing_project	hp linux imaging and printing project	eq	3.10.5