NVD

Id
9455  
Name
CVE-2011-2722  
Description
The send_data_to_stdout function in prnt/hpijs/hpcupsfax.cpp in HP Linux Imaging and Printing (HPLIP) 3.x before 3.11.10 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/hpcupsfax.out temporary file.  
Reject
 
CVSS Version
2  
CVSS Score
1.2  
Severity
Low  
CVSS Base Score
1.2  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
1.9  
CVSS Vector
(AV:L/AC:H/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-07  
Published
2012-05-25  
Modified Date
2013-10-10  
Seq
2011-2722  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
54056 9455 CVE-2011-2722 http://hplipopensource.com/hplip-web/release_notes.html  View
54057 9455 CVE-2011-2722 RHSA-2013:0133  View
54058 9455 CVE-2011-2722 GLSA-201203-17  View
54059 9455 CVE-2011-2722 [oss-security] 20110726 Re: CVE request: hplip: insecure tmp file handling  View
54060 9455 CVE-2011-2722 USN-1981-1  View
54061 9455 CVE-2011-2722 https://bugs.launchpad.net/hplip/+bug/809904  View
54062 9455 CVE-2011-2722 https://bugzilla.novell.com/show_bug.cgi?id=704608  View
54063 9455 CVE-2011-2722 https://bugzilla.redhat.com/attachment.cgi?id=515866&action=diff  View
54064 9455 CVE-2011-2722 https://bugzilla.redhat.com/show_bug.cgi?id=725830  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
26862 JVNDB-2012-002569 HP Linux Imaging and Printing の send_data_to_stdout 関数における任意のファイルを上書される脆弱性 HP Linux Imaging and Printing (HPLIP) の prnt/hpijs/hpcupsfax.cpp 内の send_data_to_stdout 関数には、任意のファイルを上書される脆弱性が存在します。 CVE-2011-2722 50629 CVE-2011-2722 9455 1.2 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-002569.html 2012-05-25 2012-05-29 View