CVE-2009-0122

{"id": "CVE-2009-0122", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 6.9, "accessVector": "LOCAL", "vectorString": "AV:L/AC:M/Au:N/C:C/I:C/A:C", "authentication": "NONE", "integrityImpact": "COMPLETE", "accessComplexity": "MEDIUM", "availabilityImpact": "COMPLETE", "confidentialityImpact": "COMPLETE"}, "acInsufInfo": false, "impactScore": 10.0, "baseSeverity": "MEDIUM", "obtainAllPrivilege": true, "exploitabilityScore": 3.4, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2009-01-15T17:30:00.483", "references": [{"url": "http://secunia.com/advisories/33539", "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/bid/33249", "tags": ["Patch"], "source": "cve@mitre.org"}, {"url": "http://www.ubuntu.com/usn/usn-708-1", "source": "cve@mitre.org"}, {"url": "https://launchpad.net/bugs/191299", "tags": ["Exploit"], "source": "cve@mitre.org"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-264"}]}], "descriptions": [{"lang": "en", "value": "hplip.postinst in HP Linux Imaging and Printing (HPLIP) 2.7.7 and 2.8.2 on Ubuntu allows local users to change the ownership of arbitrary files via unspecified manipulations in advance of an HPLIP installation or upgrade by an administrator, related to the product's attempt to correct the ownership of its configuration files within home directories."}, {"lang": "es", "value": "hplip.postinst en HP Linux Imaging and Printing (HPLIP) v2.7.7 y v2.8.2 en Ubuntu permite a usuarios locales cambiar la propiedad de ficheros a su elecci\u00f3n a trav\u00e9s de manipulaciones inespecificadas de manera previa a la instalaci\u00f3n o mejora del HPLIP por parte del administrador, relacionado con los intentos de correcci\u00f3n de propietario en sus ficheros de configuraci\u00f3n en los directorios locales."}], "lastModified": "2009-01-31T06:54:38.047", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:hp:hplip:2.7.7:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "ED2C0484-7995-488C-BF9D-61A4EC318F92"}, {"criteria": "cpe:2.3:a:hp:hplip:2.8.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "205AA0F1-796F-49EA-933F-245B558F4C3B"}], "operator": "OR"}]}], "vendorComments": [{"comment": "Not vulnerable. This issue did not affect the versions of hplip as shipped with Red Hat Enterprise Linux 5.\n", "lastModified": "2009-01-19T00:00:00", "organization": "Red Hat"}], "sourceIdentifier": "cve@mitre.org"}