CVE-2012-6108

HP Linux Imaging and Printing (HPLIP) before 3.13.2 uses world-writable permissions for /var/log/hp and /var/log/hp/tmp, which allows local users to delete log files via standard filesystem operations.

Score

CVSS 2.0 2.1 Low

Status

Modified - secalert@redhat.com

Published

2014-02-15

Last modified

2024-08-06

Weaknesses

CWE-264

Affected products

• Linux Imaging And Printing Project (Hp)

References

• http://sourceforge.net/projects/hplip/files/hplip/3.13.2/hplip-3.13.2.tar.gz/download
• https://bugs.launchpad.net/hplip/+bug/1016507/comments/1
• https://bugs.launchpad.net/hplip/+bug/1016507/comments/6
• https://bugzilla.redhat.com/show_bug.cgi?id=894283