HP Linux Imaging and Printing (HPLIP) before 3.13.2 uses world-writable permissions for /var/log/hp and /var/log/hp/tmp, which allows local users to delete log files via standard filesystem operations.
References
Configurations
Configuration 1 (hide)
|
History
21 Nov 2024, 01:45
Type | Values Removed | Values Added |
---|---|---|
References | () http://sourceforge.net/projects/hplip/files/hplip/3.13.2/hplip-3.13.2.tar.gz/download - | |
References | () https://bugs.launchpad.net/hplip/+bug/1016507/comments/1 - | |
References | () https://bugs.launchpad.net/hplip/+bug/1016507/comments/6 - | |
References | () https://bugzilla.redhat.com/show_bug.cgi?id=894283 - |
Information
Published : 2014-02-15 14:57
Updated : 2024-11-21 01:45
NVD link : CVE-2012-6108
Mitre link : CVE-2012-6108
CVE.ORG link : CVE-2012-6108
JSON object : View
Products Affected
hp
- linux_imaging_and_printing_project
CWE
CWE-264
Permissions, Privileges, and Access Controls