CVE-2013-0200

Name of the Vulnerable Software and Affected Versions HP Linux Imaging and Printing (HPLIP) versions 3.12.4 and earlier

Description The issue allows local users to overwrite arbitrary files via a symlink attack on temporary files, potentially leading to disruption of confidentiality, integrity, and availability of protected information. A local attacker can exploit this to cause harm.

Recommendations For HP Linux Imaging and Printing (HPLIP) versions 3.12.4 and earlier, consider restricting access to the temporary files /tmp/hpcupsfilterc #.bmp, /tmp/hpcupsfilterk #.bmp, /tmp/hpcups job#.out, /tmp/hpijs #####.out, and /tmp/hpps job#.out to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.