{"api_version":"1","generated_at":"2026-07-23T12:22:12+00:00","cve":"CVE-2009-0122","urls":{"html":"https://cve.report/CVE-2009-0122","api":"https://cve.report/api/cve/CVE-2009-0122.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2009-0122","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2009-0122"},"summary":{"title":"CVE-2009-0122","description":"hplip.postinst in HP Linux Imaging and Printing (HPLIP) 2.7.7 and 2.8.2 on Ubuntu allows local users to change the ownership of arbitrary files via unspecified manipulations in advance of an HPLIP installation or upgrade by an administrator, related to the product's attempt to correct the ownership of its configuration files within home directories.","state":"PUBLISHED","assigner":"mitre","published_at":"2009-01-15 17:30:00","updated_at":"2026-04-23 00:35:47"},"problem_types":["CWE-264","n/a"],"metrics":[{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"6.9","severity":"","vector":"AV:L/AC:M/Au:N/C:C/I:C/A:C","data":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:C/I:C/A:C","baseScore":6.9,"accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"}}],"references":[{"url":"https://launchpad.net/bugs/191299","name":"https://launchpad.net/bugs/191299","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"],"title":"Bug #191299 “Changes ownership of root directory to hplip:lp” : Bugs : hplip package : Ubuntu","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.securityfocus.com/bid/33249","name":"http://www.securityfocus.com/bid/33249","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"],"title":"HP Linux Imaging and Printing System 'hplip.postinst' Local Privilege Escalation Vulnerability","mime":"text/html","httpstatus":"200","archivestatus":"0"},{"url":"http://secunia.com/advisories/33539","name":"http://secunia.com/advisories/33539","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Ubuntu hplip Privilege Escalation Security Issue - Secunia Advisories - Vulnerability Intelligence - Secunia.com","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.ubuntu.com/usn/usn-708-1","name":"http://www.ubuntu.com/usn/usn-708-1","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"USN-708-1: HPLIP vulnerability | Ubuntu","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://www.cve.org/CVERecord?id=CVE-2009-0122","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2009-0122","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"n/a","product":"n/a","version":"affected n/a","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2009","cve_id":"122","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"hp","cpe5":"hplip","cpe6":"2.7.7","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"122","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"hp","cpe5":"hplip","cpe6":"2.8.2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[{"cvename":"CVE-2009-0122","organization":"Red Hat","lastmodified":"2009-01-19","contributor":"Tomas Hoger","statementText":"Not vulnerable. This issue did not affect the versions of hplip as shipped with Red Hat Enterprise Linux 5.","cve_year":"2009","cve_id":"122","crc32":"777c8ca4"}],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-07T04:24:17.554Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"name":"33539","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/33539"},{"name":"33249","tags":["vdb-entry","x_refsource_BID","x_transferred"],"url":"http://www.securityfocus.com/bid/33249"},{"name":"USN-708-1","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred"],"url":"http://www.ubuntu.com/usn/usn-708-1"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"https://launchpad.net/bugs/191299"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"datePublic":"2009-01-13T00:00:00.000Z","descriptions":[{"lang":"en","value":"hplip.postinst in HP Linux Imaging and Printing (HPLIP) 2.7.7 and 2.8.2 on Ubuntu allows local users to change the ownership of arbitrary files via unspecified manipulations in advance of an HPLIP installation or upgrade by an administrator, related to the product's attempt to correct the ownership of its configuration files within home directories."}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2009-01-31T10:00:00.000Z","orgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","shortName":"mitre"},"references":[{"name":"33539","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/33539"},{"name":"33249","tags":["vdb-entry","x_refsource_BID"],"url":"http://www.securityfocus.com/bid/33249"},{"name":"USN-708-1","tags":["vendor-advisory","x_refsource_UBUNTU"],"url":"http://www.ubuntu.com/usn/usn-708-1"},{"tags":["x_refsource_CONFIRM"],"url":"https://launchpad.net/bugs/191299"}],"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"cve@mitre.org","ID":"CVE-2009-0122","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"hplip.postinst in HP Linux Imaging and Printing (HPLIP) 2.7.7 and 2.8.2 on Ubuntu allows local users to change the ownership of arbitrary files via unspecified manipulations in advance of an HPLIP installation or upgrade by an administrator, related to the product's attempt to correct the ownership of its configuration files within home directories."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"33539","refsource":"SECUNIA","url":"http://secunia.com/advisories/33539"},{"name":"33249","refsource":"BID","url":"http://www.securityfocus.com/bid/33249"},{"name":"USN-708-1","refsource":"UBUNTU","url":"http://www.ubuntu.com/usn/usn-708-1"},{"name":"https://launchpad.net/bugs/191299","refsource":"CONFIRM","url":"https://launchpad.net/bugs/191299"}]}}}},"cveMetadata":{"assignerOrgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","assignerShortName":"mitre","cveId":"CVE-2009-0122","datePublished":"2009-01-15T17:00:00.000Z","dateReserved":"2009-01-15T00:00:00.000Z","dateUpdated":"2024-08-07T04:24:17.554Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2009-01-15 17:30:00","lastModifiedDate":"2026-04-23 00:35:47","problem_types":["CWE-264","n/a"],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:C/I:C/A:C","baseScore":6.9,"accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":10,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hp:hplip:2.7.7:*:*:*:*:*:*:*","matchCriteriaId":"ED2C0484-7995-488C-BF9D-61A4EC318F92"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:hplip:2.8.2:*:*:*:*:*:*:*","matchCriteriaId":"205AA0F1-796F-49EA-933F-245B558F4C3B"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2009","CveId":"122","Ordinal":"1","Title":"CVE-2009-0122","CVE":"CVE-2009-0122","Year":"2009"},"notes":[{"CveYear":"2009","CveId":"122","Ordinal":"1","NoteData":"hplip.postinst in HP Linux Imaging and Printing (HPLIP) 2.7.7 and 2.8.2 on Ubuntu allows local users to change the ownership of arbitrary files via unspecified manipulations in advance of an HPLIP installation or upgrade by an administrator, related to the product's attempt to correct the ownership of its configuration files within home directories.","Type":"Description","Title":"CVE-2009-0122"},{"CveYear":"2009","CveId":"122","Ordinal":"2","NoteData":"2009-01-15","Type":"Other","Title":"Published"},{"CveYear":"2009","CveId":"122","Ordinal":"3","NoteData":"2009-01-31","Type":"Other","Title":"Modified"}]}}}