Vulnerability   
Search   
    Search 219043 CVE descriptions
and 99761 test descriptions,
access 10,000+ cross references.
Tests   CVE   All  

Test ID:1.3.6.1.4.1.25623.1.0.870874
Category:Red Hat Local Security Checks
Title:RedHat Update for hplip3 RHSA-2013:0133-01
Summary:The remote host is missing an update for the 'hplip3'; package(s) announced via the referenced advisory.
Description:Summary:
The remote host is missing an update for the 'hplip3'
package(s) announced via the referenced advisory.

Vulnerability Insight:
Hewlett-Packard Linux Imaging and Printing (HPLIP) provides drivers for
Hewlett-Packard (HP) printers and multifunction peripherals.

It was found that the HP CUPS (Common UNIX Printing System) fax filter in
HPLIP created a temporary file in an insecure way. A local attacker could
use this flaw to perform a symbolic link attack, overwriting arbitrary
files accessible to a process using the fax filter (such as the
hp3-sendfax tool). (CVE-2011-2722)

This update also fixes the following bug:

* Previous modifications of the hplip3 package to allow it to be installed
alongside the original hplip package introduced several problems to fax
support. For example, the hp-sendfax utility could become unresponsive.
These problems have been fixed with this update. (BZ#501834)

All users of hplip3 are advised to upgrade to these updated packages, which
contain backported patches to correct these issues.

Affected Software/OS:
hplip3 on Red Hat Enterprise Linux (v. 5 server)

Solution:
Please Install the Updated Packages.

CVSS Score:
1.2

CVSS Vector:
AV:L/AC:H/Au:N/C:N/I:P/A:N

Cross-Ref: Common Vulnerability Exposure (CVE) ID: CVE-2011-2722
http://security.gentoo.org/glsa/glsa-201203-17.xml
http://www.openwall.com/lists/oss-security/2011/07/26/14
RedHat Security Advisories: RHSA-2013:0133
http://rhn.redhat.com/errata/RHSA-2013-0133.html
http://secunia.com/advisories/48441
http://secunia.com/advisories/55083
http://www.ubuntu.com/usn/USN-1981-1
CopyrightCopyright (c) 2013 Greenbone Networks GmbH

This is only one of 99761 vulnerability tests in our test suite. Find out more about running a complete security audit.

To run a free test of this vulnerability against your system, register below.




© 1998-2021 E-Soft Inc. All rights reserved.