HP Linux Imaging And Printing System Security Bypass Vulnerability Network Vulnerability

Summary

This host is installed with HP Linux Imaging and Printing System and is prone to Security Bypass vulnerability.

Impact

Successful exploitation will let the attacker gain unauthorized privileges and escalate the privileges in a malicious way.

Solution

Upgrade to Higher version, http://security.ubuntu.com/ubuntu/pool/main/h/hplip/ ***** NOTE: Please ignore the warning, if patch is applied. *****

Insight

This flaw is due to the 'postinst' script of the hplip package which tries to change the permissions of user config files in an insecure manner.

Affected

HP Linux Imaging and Printing System version 2.7.7 or 2.8.2

References

Updated on 2015-03-25

Severity

Classification

CVSS	Base Score: 6.9 AV:L/AC:M/Au:N/C:C/I:C/A:C

Related Vulnerabilities

HP Linux Imaging and Printing System Security Bypass Vulnerability