Home

CVE-2011-2722

Description

The send_data_to_stdout function in prnt/hpijs/hpcupsfax.cpp in HP Linux Imaging and Printing (HPLIP) 3.x before 3.11.10 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/hpcupsfax.out temporary file.

Risk Information

Base Score
7.7
MODERATE
Vector
AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
EPSS Score
Exploitation Probability
0.07

Associated Vulnerability

VulnerabilityOS Platform
(RHSA-2013:0133) Low: hplip3 security and bug fix update hpijs3-3.9.8-15.el5.i386.rpmLinux
(RHSA-2013:0133) Low: hplip3 security and bug fix update hpijs3-3.9.8-15.el5.x86_64.rpmLinux
(RHSA-2013:0133) Low: hplip3 security and bug fix update hplip3-3.9.8-15.el5.i386.rpmLinux
(RHSA-2013:0133) Low: hplip3 security and bug fix update hplip3-3.9.8-15.el5.x86_64.rpmLinux
(RHSA-2013:0133) Low: hplip3 security and bug fix update hplip3-common-3.9.8-15.el5.i386.rpmLinux
(RHSA-2013:0133) Low: hplip3 security and bug fix update hplip3-common-3.9.8-15.el5.x86_64.rpmLinux
(RHSA-2013:0133) Low: hplip3 security and bug fix update hplip3-gui-3.9.8-15.el5.i386.rpmLinux
(RHSA-2013:0133) Low: hplip3 security and bug fix update hplip3-gui-3.9.8-15.el5.x86_64.rpmLinux
(RHSA-2013:0133) Low: hplip3 security and bug fix update hplip3-libs-3.9.8-15.el5.i386.rpmLinux
(RHSA-2013:0133) Low: hplip3 security and bug fix update hplip3-libs-3.9.8-15.el5.x86_64.rpmLinux
(RHSA-2013:0133) Low: hplip3 security and bug fix update libsane-hpaio3-3.9.8-15.el5.i386.rpmLinux
(RHSA-2013:0133) Low: hplip3 security and bug fix update libsane-hpaio3-3.9.8-15.el5.x86_64.rpmLinux
Multiple Vulnerabilities affected in linux_imaging_and_printing_project 2.7.10NCM
Multiple Vulnerabilities affected in linux_imaging_and_printing_project 3.10.9NCM
Multiple Vulnerabilities affected in linux_imaging_and_printing_project 3.11.5NCM
Multiple Vulnerabilities affected in linux_imaging_and_printing_project 3.11.7NCM
Vulnerabilities CVE-2011-2722 ,CVE-2012-6108 ,CVE-2013-0200 ,CVE-2013-4325 ,CVE-2013-6402 are affected in linux_imaging_and_printing_project 2.0NCM
Vulnerabilities CVE-2011-2722 ,CVE-2012-6108 ,CVE-2013-0200 ,CVE-2013-4325 ,CVE-2013-6402 are affected in linux_imaging_and_printing_project 1.0NCM
Multiple Vulnerabilities affected in linux_imaging_and_printing_project 3.11.3aNCM
Multiple Vulnerabilities affected in linux_imaging_and_printing_project 3.11.3NCM
Multiple Vulnerabilities affected in linux_imaging_and_printing_project 3.11.1NCM
Multiple Vulnerabilities affected in linux_imaging_and_printing_project 3.10.6NCM
Multiple Vulnerabilities affected in linux_imaging_and_printing_project 3.10.5NCM
Multiple Vulnerabilities affected in linux_imaging_and_printing_project 3.10.2NCM
Multiple Vulnerabilities affected in linux_imaging_and_printing_project 3.9.12NCM
Multiple Vulnerabilities affected in linux_imaging_and_printing_project 3.9.10NCM
Multiple Vulnerabilities affected in linux_imaging_and_printing_project 3.9.8NCM
Multiple Vulnerabilities affected in linux_imaging_and_printing_project 3.9.6NCM
Multiple Vulnerabilities affected in linux_imaging_and_printing_project 3.9.4bNCM
Multiple Vulnerabilities affected in linux_imaging_and_printing_project 3.9.4NCM
Multiple Vulnerabilities affected in linux_imaging_and_printing_project 3.9.2NCM
Improper Link Resolution Before File Access (Link Following) Vulnerability (CVE-2011-2722)NCM

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234