CVE-2013-0200 — Insecure Temporary File in Hplip

CWE-377 — Insecure Temporary FileCWE-59 — Link Following10 documents7 sources
Severity
1.9LOWNVD
OSV1.2
EPSS
0.1%
top 77.21%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
3
Debian HplipHP Linux Imaging AND Printing ProjectRedhat Enterprise Linux
Timeline
PublishedMar 6
Latest updateMay 17

Description

HP Linux Imaging and Printing (HPLIP) through 3.12.4 allows local users to overwrite arbitrary files via a symlink attack on the (1) /tmp/hpcupsfilterc_#.bmp, (2) /tmp/hpcupsfilterk_#.bmp, (3) /tmp/hpcups_job#.out, (4) /tmp/hpijs_#####.out, or (5) /tmp/hpps_job#.out temporary file, a different vulnerability than CVE-2011-2722.

CVSS vector

AV:L/AC:M/C:N/I:P/A:NExploitability: 3.4 | Impact: 2.9

Affected Packages2 packages

▶debiandebian/hplip< hplip 3.12.6-3.1 (bookworm)

Also affects: Enterprise Linux 6.0

Patches

Patch: ftp.scientificlinux.org ↗Patch: ftp.scientificlinux.org ↗

🔴Vulnerability Details

2
GHSA
GHSA-3xc3-235x-7q23: HP Linux Imaging and Printing (HPLIP) through 3↗2022-05-17
▶
OSV
CVE-2013-0200: HP Linux Imaging and Printing (HPLIP) through 3↗2013-03-06
▶

📋Vendor Advisories

3
Ubuntu
HPLIP vulnerabilities↗2013-09-30
▶
Red Hat
hplip: insecure temporary file handling flaws↗2013-02-21
▶
Debian
CVE-2013-0200: hplip - HP Linux Imaging and Printing (HPLIP) through 3.12.4 allows local users to overw...↗2013
▶

💬Community

3
Bugzilla
CVE-2013-6402 hplip: insecure temporary file handling in pkit.py↗2013-11-27
▶
Bugzilla
CVE-2013-2113 Foreman: app/controllers/users_controller.rb arbitrary admin user creation due to mass assignment↗2013-05-24
▶
Bugzilla
CVE-2013-0200 hplip: insecure temporary file handling flaws↗2013-01-21
▶