CVEvulnerability

CVE-2011-2722

1.2 LOW Published 2012-05-25 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2012-05-25
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
1.2 LOW — AV:L/AC:H/Au:N/C:N/I:P/A:N
Weaknesses
CWE-59

Description

The send_data_to_stdout function in prnt/hpijs/hpcupsfax.cpp in HP Linux Imaging and Printing (HPLIP) 3.x before 3.11.10 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/hpcupsfax.out temporary file.

Affected configurations

• hp linux imaging and printing project (<= 3.11.5) • hp linux imaging and printing project 3.9.2 • hp linux imaging and printing project 3.9.4 • hp linux imaging and printing project 3.9.4b • hp linux imaging and printing project 3.9.6 • hp linux imaging and printing project 3.9.8 • hp linux imaging and printing project 3.9.10 • hp linux imaging and printing project 3.9.12 • hp linux imaging and printing project 3.10.2 • hp linux imaging and printing project 3.10.5 • hp linux imaging and printing project 3.10.6 • hp linux imaging and printing project 3.10.9 • hp linux imaging and printing project 3.11.1 • hp linux imaging and printing project 3.11.3 • hp linux imaging and printing project 3.11.3a • hp linux imaging and printing project 3.11.7

Related

Weakness · CWE (1)

  • CWE-59 Improper Link Resolution Before File Access weakness

References