CVE-2011-2722
Published May 25, 2012
Last updated 2 years ago
Overview
- Description
- The send_data_to_stdout function in prnt/hpijs/hpcupsfax.cpp in HP Linux Imaging and Printing (HPLIP) 3.x before 3.11.10 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/hpcupsfax.out temporary file.
- Source
- secalert@redhat.com
- NVD status
- Modified
Social media
- Hype score
- Not currently trending
Risk scores
CVSS 2.0
- Type
- Primary
- Base score
- 1.2
- Impact score
- 2.9
- Exploitability score
- 1.9
- Vector string
- AV:L/AC:H/Au:N/C:N/I:P/A:N
Weaknesses
- nvd@nist.gov
- CWE-59
Configurations
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:hp:linux_imaging_and_printing_project:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "74EC25B6-1296-4541-BBAF-5FA6DFBD44AD",
"versionEndIncluding": "3.11.5"
},
{
"criteria": "cpe:2.3:a:hp:linux_imaging_and_printing_project:3.9.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "DE0F0C34-1C19-4487-8A36-23DD04E8DFED"
},
{
"criteria": "cpe:2.3:a:hp:linux_imaging_and_printing_project:3.9.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1E7E4C2F-71D7-4953-BF24-BDD3430D08B7"
},
{
"criteria": "cpe:2.3:a:hp:linux_imaging_and_printing_project:3.9.4b:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1D4F5DF5-171D-4843-BF89-67C462342657"
},
{
"criteria": "cpe:2.3:a:hp:linux_imaging_and_printing_project:3.9.6:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6008F293-264E-4148-92C7-5A8243673A7B"
},
{
"criteria": "cpe:2.3:a:hp:linux_imaging_and_printing_project:3.9.8:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C1DCD43B-6103-4C0C-8EFB-ADA8A3E8FEFC"
},
{
"criteria": "cpe:2.3:a:hp:linux_imaging_and_printing_project:3.9.10:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "151627C7-DCCD-424D-ABC8-4BE9DB7E748E"
},
{
"criteria": "cpe:2.3:a:hp:linux_imaging_and_printing_project:3.9.12:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7EEFACF4-127C-42E4-8EDF-DDD0EC415622"
},
{
"criteria": "cpe:2.3:a:hp:linux_imaging_and_printing_project:3.10.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B1A84A4A-6DD8-41E4-B6D8-A18DC67883B7"
},
{
"criteria": "cpe:2.3:a:hp:linux_imaging_and_printing_project:3.10.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7C27C896-AC89-4BFC-938A-4A3BE23B4487"
},
{
"criteria": "cpe:2.3:a:hp:linux_imaging_and_printing_project:3.10.6:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "CDFE0033-5404-4E74-A7C8-FFB576BFA9AE"
},
{
"criteria": "cpe:2.3:a:hp:linux_imaging_and_printing_project:3.10.9:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "525CAF0A-0B21-47CA-A674-7DF64207E4C5"
},
{
"criteria": "cpe:2.3:a:hp:linux_imaging_and_printing_project:3.11.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "BF339BD9-AA5E-48CD-BF2C-0E8469DDFC3D"
},
{
"criteria": "cpe:2.3:a:hp:linux_imaging_and_printing_project:3.11.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "EDB1B7A9-AEA3-4A96-AC94-9F3350664B47"
},
{
"criteria": "cpe:2.3:a:hp:linux_imaging_and_printing_project:3.11.3a:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E27837F2-C9D5-45CF-8869-C83172C3371C"
},
{
"criteria": "cpe:2.3:a:hp:linux_imaging_and_printing_project:3.11.7:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5029D05B-0DCF-41FD-AF3C-B7312E220D97"
}
],
"operator": "OR"
}
]
}
]