HP Linux Imaging and Printing Insecure Temporary File Creation Vulnerability

Bugtraq ID:	48892
Class:	Design Error
CVE:	CVE-2011-2722
Remote:	No
Local:	Yes
Published:	Jul 26 2011 12:00AM
Updated:	May 07 2015 05:17PM
Credit:	Steve Kemp
Vulnerable:	Ubuntu Ubuntu Linux 12.10 i386 Ubuntu Ubuntu Linux 12.10 amd64 Ubuntu Ubuntu Linux 12.04 LTS i386 Ubuntu Ubuntu Linux 12.04 LTS amd64 Ubuntu Ubuntu Linux 10.04 sparc Ubuntu Ubuntu Linux 10.04 powerpc Ubuntu Ubuntu Linux 10.04 i386 Ubuntu Ubuntu Linux 10.04 ARM Ubuntu Ubuntu Linux 10.04 amd64 Redhat Enterprise Linux Workstation 6 Redhat Enterprise Linux Server 6 Redhat Enterprise Linux Desktop 6 Redhat Enterprise Linux Desktop 5 client Redhat Enterprise Linux 5 Server Oracle Enterprise Linux 5 HP HPLIP 2.8.2 HP HPLIP 2.7.7 HP HPLIP 1.6.7 HP HPLIP 2.8 HP HPLIP 2.7 Gentoo Linux CentOS CentOS 6 CentOS CentOS 5
Not Vulnerable:

HP Linux Imaging and Printing Insecure Temporary File Creation Vulnerability

HP Linux Imaging and Printing is prone to a vulnerability because it creates temporary files in an insecure manner.

An attacker with local access could potentially exploit this issue to perform symbolic-link attacks, overwriting arbitrary files in the context of the affected application.

Successfully mounting a symlink attack may allow the attacker to delete or corrupt sensitive files, which may result in a denial of service. Other attacks may also be possible.

HP Linux Imaging and Printing Insecure Temporary File Creation Vulnerability

An attacker can use readily available commands to exploit this issue.

HP Linux Imaging and Printing Insecure Temporary File Creation Vulnerability

References:

• Bug 704608 - VUL-1: hplip: insecure tmp file handling in hpcupsfax.cpp -> potent (HPLIP)
  
• HP Linux Imaging and Printing Homepage (HPLIP)