HPLIP CVE-2012-6108 Multiple Insecure File Permissions Vulnerabilities
BID:65659
Info
HPLIP CVE-2012-6108 Multiple Insecure File Permissions Vulnerabilities
| Bugtraq ID: | 65659 |
| Class: | Design Error |
| CVE: |
CVE-2012-6108 |
| Remote: | No |
| Local: | Yes |
| Published: | Jan 11 2013 12:00AM |
| Updated: | Jan 11 2013 12:00AM |
| Credit: | Tim Waugh |
| Vulnerable: |
HP HPLIP 3.12.11 HP HPLIP 3.12.10 HP HPLIP 3.12.9 HP HPLIP 3.12.6 HP HPLIP 3.12.4 HP HPLIP 3.12.2 HP HPLIP 3.12.10a |
| Not Vulnerable: |
HP HPLIP 3.13.2 |
Discussion
HPLIP CVE-2012-6108 Multiple Insecure File Permissions Vulnerabilities
HPLIP is prone to multiple insecure file-permission vulnerabilities.
A local attacker can exploit these issues to delete log files using standard filesystem operations.
HPLIP prior to 3.13.2 are vulnerable.
HPLIP is prone to multiple insecure file-permission vulnerabilities.
A local attacker can exploit these issues to delete log files using standard filesystem operations.
HPLIP prior to 3.13.2 are vulnerable.
Exploit / POC
HPLIP CVE-2012-6108 Multiple Insecure File Permissions Vulnerabilities
Attackers require local interactive access to an affected computer to exploit this issue.
Attackers require local interactive access to an affected computer to exploit this issue.
Solution / Fix
HPLIP CVE-2012-6108 Multiple Insecure File Permissions Vulnerabilities
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.
References
HPLIP CVE-2012-6108 Multiple Insecure File Permissions Vulnerabilities
References:
References:
- Bug #1016507 - Bad PrivateTmp=true workaround (Tim Waugh)
- Bug 894283 - (CVE-2012-6108) CVE-2012-6108 hplip: default permissions for /var/l (Red Hat Bugzilla)
- HPLIP Homepage (HPLIP)