Detections
Analytics
CentOS 5 : hplip (CESA-2007:0960)
high Nessus Plugin ID 43657
Language:
Synopsis
The remote CentOS host is missing one or more security updates.Description
An updated hplip package to correct a security flaw is now available for Red Hat Enterprise Linux 5.This update has been rated as having important security impact by the Red Hat Security Response Team.
The hplip (Hewlett-Packard Linux Imaging and Printing Project) package provides drivers for HP printers and multi-function peripherals.
Kees Cook discovered a flaw in the way the hplip hpssd daemon handled user input. A local attacker could send a specially crafted request to the hpssd daemon, possibly allowing them to run arbitrary commands as the root user. (CVE-2007-5208). On Red Hat Enterprise Linux 5, the SELinux targeted policy for hpssd which is enabled by default, blocks the ability to exploit this issue to run arbitrary code.
Users of hplip are advised to upgrade to this updated package, which contains backported patches to resolve this issue.
Solution
Update the affected hplip packages.See Also
Plugin Details
Severity: High
ID: 43657
File Name: centos_RHSA-2007-0960.nasl
Version: 1.16
Type: local
Agent: unix
Family: CentOS Local Security Checks
Published: 1/6/2010
Updated: 1/4/2021
Supported Sensors: Agentless Assessment, Continuous Assessment, Frictionless Assessment Agent, Frictionless Assessment AWS, Frictionless Assessment Azure, Nessus
Risk Information
VPR
Risk Factor: High
Score: 7.4
CVSS v2
Risk Factor: High
Base Score: 7.6
Temporal Score: 6.3
Vector: CVSS2#AV:N/AC:H/Au:N/C:C/I:C/A:C
Vulnerability Information
CPE: p-cpe:/a:centos:centos:libsane-hpaio, cpe:/o:centos:centos:5, p-cpe:/a:centos:centos:hplip, p-cpe:/a:centos:centos:hpijs
Required KB Items: Host/local_checks_enabled, Host/CentOS/release, Host/CentOS/rpm-list
Exploit Available: true
Exploit Ease: Exploits are available
Patch Publication Date: 10/13/2007
Vulnerability Publication Date: 10/12/2007
Exploitable With
CANVAS (D2ExploitPack)
Core Impact
Metasploit (HPLIP hpssd.py From Address Arbitrary Command Execution)
Reference Information
CVE: CVE-2007-5208
BID: 26054