Vulnerability CVE-2012-6108
Published: 2014-02-15

Description:
HP Linux Imaging and Printing (HPLIP) before 3.13.2 uses world-writable permissions for /var/log/hp and /var/log/hp/tmp, which allows local users to delete log files via standard filesystem operations.

Type:

CWE-264

 (Permissions, Privileges, and Access Controls)

CVSS2 => (AV:L/AC:L/Au:N/C:N/I:N/A:P)

CVSS Base Score
Impact Subscore
Exploitability Subscore
2.1/10
2.9/10
3.9/10
Exploit range
Attack complexity
Authentication
Local
Low
No required
Confidentiality impact
Integrity impact
Availability impact
None
None
Partial
Affected software
HP -> Linux imaging and printing project 

 References:
https://bugzilla.redhat.com/show_bug.cgi?id=894283
https://bugs.launchpad.net/hplip/+bug/1016507/comments/6
https://bugs.launchpad.net/hplip/+bug/1016507/comments/1
http://sourceforge.net/projects/hplip/files/hplip/3.13.2/hplip-3.13.2.tar.gz/download
Copyright 2024, cxsecurity.com

 

Back to Top