linux imaging and printing project vulnerabilities and exploits

(subscribe to this query)

upgrade.py in the hp-upgrade service in HP Linux Imaging and Printing (HPLIP) 3.x up to and including 3.13.11 launches a program from an http URL, which allows man-in-the-middle malicious users to execute arbitrary code by gaining control over the client-server data stream.

Hp Linux Imaging And Printing Project 3.11.3a Hp Linux Imaging And Printing Project 3.13.5 Hp Linux Imaging And Printing Project 3.13.4 Hp Linux Imaging And Printing Project 3.12.4 Hp Linux Imaging And Printing Project 3.12.2 Hp Linux Imaging And Printing Project 3.11.1 Hp Linux Imaging And Printing Project 3.10.9 Hp Linux Imaging And Printing Project 3.9.6 Hp Linux Imaging And Printing Project 3.9.4 Hp Linux Imaging And Printing Project 3.13.8 Hp Linux Imaging And Printing Project 3.9.4b Hp Linux Imaging And Printing Project 3.13.3 Hp Linux Imaging And Printing Project 3.13.2 Hp Linux Imaging And Printing Project 3.11.12 Hp Linux Imaging And Printing Project 3.11.10 Hp Linux Imaging And Printing Project 3.10.6 Hp Linux Imaging And Printing Project 3.10.5 Hp Linux Imaging And Printing Project 3.9.2 Hp Linux Imaging And Printing Project 3.13.7 Hp Linux Imaging And Printing Project 3.13.6 Hp Linux Imaging And Printing Project 3.12.10 Hp Linux Imaging And Printing Project 3.12.9

The send_data_to_stdout function in prnt/hpijs/hpcupsfax.cpp in HP Linux Imaging and Printing (HPLIP) 3.x prior to 3.11.10 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/hpcupsfax.out temporary file.

Hp Linux Imaging And Printing Project 3.9.6 Hp Linux Imaging And Printing Project 3.10.6 Hp Linux Imaging And Printing Project 3.11.1 Hp Linux Imaging And Printing Project 3.11.3a Hp Linux Imaging And Printing Project 3.9.4b Hp Linux Imaging And Printing Project 3.9.12 Hp Linux Imaging And Printing Project 3.9.4 Hp Linux Imaging And Printing Project 3.9.10 Hp Linux Imaging And Printing Project 3.10.9 Hp Linux Imaging And Printing Project 3.9.8 Hp Linux Imaging And Printing Project 3.10.5 Hp Linux Imaging And Printing Project 3.11.3 Hp Linux Imaging And Printing Project 3.9.2 Hp Linux Imaging And Printing Project 3.10.2 Hp Linux Imaging And Printing Project Hp Linux Imaging And Printing Project 3.11.7

base/pkit.py in HP Linux Imaging and Printing (HPLIP) up to and including 3.13.11 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/hp-pkservice.log temporary file.

Hp Linux Imaging And Printing Project Hp Linux Imaging And Printing Project 3.11.3a Hp Linux Imaging And Printing Project 3.13.5 Hp Linux Imaging And Printing Project 3.13.4 Hp Linux Imaging And Printing Project 3.12.6 Hp Linux Imaging And Printing Project 3.12.4 Hp Linux Imaging And Printing Project 3.11.1 Hp Linux Imaging And Printing Project 3.10.9 Hp Linux Imaging And Printing Project 3.9.6 Hp Linux Imaging And Printing Project 3.9.4 Hp Linux Imaging And Printing Project 3.13.8 Hp Linux Imaging And Printing Project 3.9.4b Hp Linux Imaging And Printing Project 3.13.3 Hp Linux Imaging And Printing Project 3.13.2 Hp Linux Imaging And Printing Project 3.12.2 Hp Linux Imaging And Printing Project 3.11.12 Hp Linux Imaging And Printing Project 3.11.10 Hp Linux Imaging And Printing Project 3.10.6 Hp Linux Imaging And Printing Project 3.10.5 Hp Linux Imaging And Printing Project 3.9.2 Hp Linux Imaging And Printing Project 3.13.10 Hp Linux Imaging And Printing Project 3.13.9

HP Linux Imaging and Printing (HPLIP) prior to 3.13.2 uses world-writable permissions for /var/log/hp and /var/log/hp/tmp, which allows local users to delete log files via standard filesystem operations.

Hp Linux Imaging And Printing Project 3.11.5 Hp Linux Imaging And Printing Project 3.11.7 Hp Linux Imaging And Printing Project 3.12.10 Hp Linux Imaging And Printing Project 3.12.11 Hp Linux Imaging And Printing Project 1.0 Hp Linux Imaging And Printing Project 2.7.10 Hp Linux Imaging And Printing Project 3.11.1 Hp Linux Imaging And Printing Project 3.11.3 Hp Linux Imaging And Printing Project 3.10.2 Hp Linux Imaging And Printing Project 3.10.5 Hp Linux Imaging And Printing Project 3.10.6 Hp Linux Imaging And Printing Project 3.10.9 Hp Linux Imaging And Printing Project 3.9.10 Hp Linux Imaging And Printing Project 3.9.12 Hp Linux Imaging And Printing Project 3.9.2 Hp Linux Imaging And Printing Project 3.9.4 Hp Linux Imaging And Printing Project 3.12.2 Hp Linux Imaging And Printing Project 3.12.6 Hp Linux Imaging And Printing Project 3.9.6 Hp Linux Imaging And Printing Project Hp Linux Imaging And Printing Project 2.0 Hp Linux Imaging And Printing Project 3.11.10

HP Linux Imaging and Printing (HPLIP) up to and including 3.12.4 allows local users to overwrite arbitrary files via a symlink attack on the (1) /tmp/hpcupsfilterc_#.bmp, (2) /tmp/hpcupsfilterk_#.bmp, (3) /tmp/hpcups_job#.out, (4) /tmp/hpijs_#####.out, or (5) /tmp/hpps_job#.out t...

Hp Linux Imaging And Printing Project 3.9.6 Hp Linux Imaging And Printing Project 3.10.6 Hp Linux Imaging And Printing Project 3.11.1 Hp Linux Imaging And Printing Project 3.11.3a Hp Linux Imaging And Printing Project 3.9.4b Hp Linux Imaging And Printing Project 3.9.12 Hp Linux Imaging And Printing Project 1.0 Hp Linux Imaging And Printing Project 2.7.10 Hp Linux Imaging And Printing Project 2.0 Hp Linux Imaging And Printing Project 3.9.4 Hp Linux Imaging And Printing Project 3.9.10 Hp Linux Imaging And Printing Project 3.10.9 Hp Linux Imaging And Printing Project 3.9.8 Hp Linux Imaging And Printing Project 3.10.5 Hp Linux Imaging And Printing Project Hp Linux Imaging And Printing Project 3.11.3 Hp Linux Imaging And Printing Project 3.11.5 Hp Linux Imaging And Printing Project 3.11.10 Hp Linux Imaging And Printing Project 3.9.2 Hp Linux Imaging And Printing Project 3.10.2 Hp Linux Imaging And Printing Project 3.11.7 Redhat Enterprise Linux 6.0

Stack-based buffer overflow in the hpmud_get_pml function in io/hpmud/pml.c in Hewlett-Packard Linux Imaging and Printing (HPLIP) 1.6.7, 3.9.8, 3.10.9, and probably other versions allows remote malicious users to cause a denial of service (crash) and possibly execute arbitrary co...

Hp Linux Imaging And Printing Project 3.10.9 Hp Linux Imaging And Printing Project 1.6.7 Hp Linux Imaging And Printing Project 3.9.8

hpssd in Hewlett-Packard Linux Imaging and Printing Project (hplip) 1.x and 2.x prior to 2.7.10 allows context-dependent malicious users to execute arbitrary commands via shell metacharacters in a from address, which is not properly handled when invoking sendmail.

Hp Linux Imaging And Printing Project 1.0 Hp Linux Imaging And Printing Project

1 EDB exploit

foomatic-rip-hplip in HP Linux Imaging and Printing (HPLIP) 3.11.5 allows remote malicious users to execute arbitrary code via a crafted *FoomaticRIPCommandLine field in a .ppd file.

Hp Linux Imaging And Printing Project 3.11.5

The alert-mailing implementation in HP Linux Imaging and Printing (HPLIP) 1.6.7 allows local users to gain privileges and send e-mail messages from the root account via vectors related to the setalerts message, and lack of validation of the device URI associated with an event mes...

Hp Linux Imaging And Printing Project 1.6.7

The hpssd message parser in hpssd.py in HP Linux Imaging and Printing (HPLIP) 1.6.7 allows local users to cause a denial of service (process stop) via a crafted packet, as demonstrated by sending "msg=0" to TCP port 2207.

Hp Linux Imaging And Printing Project 1.6.7

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook