Upstream information
Description
The alert-mailing implementation in HP Linux Imaging and Printing (HPLIP) 1.6.7 allows local users to gain privileges and send e-mail messages from the root account via vectors related to the setalerts message, and lack of validation of the device URI associated with an event message.SUSE information
Overall state of this security issue: Does not affect SUSE products
This issue is currently rated as having important severity.
NVD | |
---|---|
Base Score | 7.2 |
Vector | AV:L/AC:L/Au:N/C:C/I:C/A:C |
Access Vector | Local |
Access Complexity | Low |
Authentication | None |
Confidentiality Impact | Complete |
Integrity Impact | Complete |
Availability Impact | Complete |
SUSE Security Advisories:
- SUSE-SR:2008:021, published Fri, 17 Oct 2008 14:00:00 +0000
SUSE Timeline for this CVE
CVE page created: Tue Jul 9 16:04:59 2013CVE page last modified: Mon Sep 9 16:59:58 2024