NVD

Id
2834  
Name
CVE-2008-2940  
Description
The alert-mailing implementation in HP Linux Imaging and Printing (HPLIP) 1.6.7 allows local users to gain privileges and send e-mail messages from the root account via vectors related to the setalerts message, and lack of validation of the device URI associated with an event message.  
Reject
 
CVSS Version
2  
CVSS Score
7.2  
Severity
High  
CVSS Base Score
7.2  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-03  
Published
2008-08-14  
Modified Date
2012-10-30  
Seq
2008-2940  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
18009 2834 CVE-2008-2940 SUSE-SR:2008:021  View
18010 2834 CVE-2008-2940 oval:org.mitre.oval:def:10136  View
18011 2834 CVE-2008-2940 1020684  View
18012 2834 CVE-2008-2940 MDVSA-2008:169  View
18013 2834 CVE-2008-2940 RHSA-2008:0818  View
18014 2834 CVE-2008-2940 30683  View
18015 2834 CVE-2008-2940 USN-674-1  View
18016 2834 CVE-2008-2940 USN-674-2  View
18017 2834 CVE-2008-2940 hplip-alertmailing-privilege-escalation(44441)  View
18018 2834 CVE-2008-2940 https://bugzilla.redhat.com/show_bug.cgi?id=455235  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
46310 JVNDB-2008-001620 HPLIP の alert-mailing 実装における権限昇格の脆弱性 HP Linux Imaging and Printing (HPLIP) の alert-mailing 実装には、setalerts メッセージおよびイベントメッセージで構成されたデバイス URI の検査の欠落に関連した、権限昇格の脆弱性が存在します。 CVE-2008-2940 33053 CVE-2008-2940 2834 7.2 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-001620.html 2008-08-12 2008-11-10 View