Arbitrary File Overwrite Vulnerability in HP Linux Imaging and Printing (HPLIP)

CVE-2013-0200 · LOW Severity

AV:L/AC:M/AU:N/C:N/I:P/A:N

HP Linux Imaging and Printing (HPLIP) through 3.12.4 allows local users to overwrite arbitrary files via a symlink attack on the (1) /tmp/hpcupsfilterc_#.bmp, (2) /tmp/hpcupsfilterk_#.bmp, (3) /tmp/hpcups_job#.out, (4) /tmp/hpijs_#####.out, or (5) /tmp/hpps_job#.out temporary file, a different vulnerability than CVE-2011-2722.

Learn more about our Cis Benchmark Audit For Distribution Independent Linux.