Local File Ownership Manipulation in HP Linux Imaging and Printing on Ubuntu
CVE-2009-0122

Currently unrated

Key Information:

Vendor

HP
Status
HPlip
Vendor
CVE Published:
15 January 2009

What is CVE-2009-0122?

The HP Linux Imaging and Printing (HPLIP) software versions 2.7.7 and 2.8.2 on Ubuntu is susceptible to a local file ownership manipulation issue. Local users can exploit this vulnerability to change the ownership of arbitrary files due to improper handling during HPLIP installation or upgrade. This security hole arises from the software's attempt to correct the ownership of configuration files within users' home directories, potentially allowing unauthorized access or modification of sensitive files.

References

http://secunia.com/advisories/33539
third-party-advisoryx_refsource_SECUNIA
http://www.securityfocus.com/bid/33249
vdb-entryx_refsource_BID
http://www.ubuntu.com/usn/usn-708-1
vendor-advisoryx_refsource_UBUNTU

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.