Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 461
Alerts This Week
Warning Icon 1 461

Ubuntu: 12.10, 12.04 LTS USN-1981-1 Moderate: HPLIP File Overwrite

ubuntu
Calendar Grey September 30, 2013
Scroller Ubuntu
Recent HPLIP flaws may allow for unauthorized file modification in Ubuntu systems. Users are advised to upgrade to the latest versions to mitigate risks.
HPLIP could be made to overwrite files.

Summary

HPLIP could be made to overwrite files.

Software Description:

- hplip: HP Linux Printing and Imaging System (HPLIP)

Details:

It was discovered that HPLIP incorrectly handled temporary files when using

the fax capabilities. A local attacker could possibly use this issue to

overwrite arbitrary files. This issue only applied to Ubuntu 10.04 LTS.

(CVE-2011-2722)

Tim Waugh discovered that HPLIP incorrectly handled temporary files when

printing. A local attacker could possibly use this issue to overwrite

arbitrary files. In the default installation of Ubuntu 12.04 LTS and Ubuntu

12.10, this should be prevented by the Yama link restrictions.

(CVE-2013-0200)

Topics%20covered

Topics Covered

security advisory moderate file overwrite Ubuntu local attack HPLIP

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 12.10:
  hplip                           3.12.6-3ubuntu4.2

Ubuntu 12.04 LTS:
  hplip                           3.12.2-1ubuntu3.3

Ubuntu 10.04 LTS:
  hplip                           3.10.2-2ubuntu2.4

In general, a standard system update will make all the necessary changes.

References

https://ubuntu.com/security/notices/USN-1981-1

CVE-2011-2722, CVE-2013-0200

Severity
important
Lowest
Low
Medium
High
Critical

September 30, 2013

Topics%20covered

Topics Covered

security advisory moderate file overwrite Ubuntu local attack HPLIP

Package Information

https://launchpad.net/ubuntu/+source/hplip/3.12.6-3ubuntu4.2
https://launchpad.net/ubuntu/+source/hplip/3.12.2-1ubuntu3.3
https://launchpad.net/ubuntu/+source/hplip/3.10.2-2ubuntu2.4

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.