Scientific Linux Security Update : hplip3 on SL5.x i386/x86_64 (20130108)

low Nessus Plugin ID 63596

Language:

Synopsis

The remote Scientific Linux host is missing one or more security updates.

Description

It was found that the HP CUPS (Common UNIX Printing System) fax filter in HPLIP created a temporary file in an insecure way. A local attacker could use this flaw to perform a symbolic link attack, overwriting arbitrary files accessible to a process using the fax filter (such as the hp3-sendfax tool). (CVE-2011-2722)

This update also fixes the following bug :

- Previous modifications of the hplip3 package to allow it to be installed alongside the original hplip package introduced several problems to fax support; for example, the hp-sendfax utility could become unresponsive. These problems have been fixed with this update.

Solution

Update the affected packages.

Plugin Details

Severity: Low

ID: 63596

File Name: sl_20130108_hplip3_on_SL5_x.nasl

Version: 1.5

Type: local

Agent: unix

Family: Scientific Linux Local Security Checks

Published: 1/17/2013

Updated: 1/14/2021

Supported Sensors: Nessus Agent, Nessus

Risk Information

VPR

Risk Factor: Low

Score: 3.6

CVSS v2

Risk Factor: Low

Base Score: 1.2

Vector: CVSS2#AV:L/AC:H/Au:N/C:N/I:P/A:N

Vulnerability Information

CPE: p-cpe:/a:fermilab:scientific_linux:hpijs3, p-cpe:/a:fermilab:scientific_linux:hplip3-libs, x-cpe:/o:fermilab:scientific_linux, p-cpe:/a:fermilab:scientific_linux:hplip3-debuginfo, p-cpe:/a:fermilab:scientific_linux:libsane-hpaio3, p-cpe:/a:fermilab:scientific_linux:hplip3-gui, p-cpe:/a:fermilab:scientific_linux:hplip3, p-cpe:/a:fermilab:scientific_linux:hplip3-common

Required KB Items: Host/local_checks_enabled, Host/RedHat/release, Host/RedHat/rpm-list, Host/cpu

Patch Publication Date: 1/8/2013

Vulnerability Publication Date: 5/25/2012

Reference Information

CVE: CVE-2011-2722

Detections

Analytics