vulnwire
6.9med

CVE-2009-0122

hplip.postinst in HP Linux Imaging and Printing (HPLIP) 2.7.7 and 2.8.2 on Ubuntu allows local users to change the ownership of arbitrary f…

Published 17 y ago · modified 4 mo ago · JSON

CVSS
6.9
v2.0 · NVD
CISA KEV
No
not known exploited
EPSS
0.5%
percentile 44%
Public exploits
0
none known

hplip.postinst in HP Linux Imaging and Printing (HPLIP) 2.7.7 and 2.8.2 on Ubuntu allows local users to change the ownership of arbitrary files via unspecified manipulations in advance of an HPLIP installation or upgrade by an administrator, related to the product's attempt to correct the ownership of its configuration files within home directories.

Exploit prediction (EPSS)

0.51% probability of exploitation in the next 30 days, higher than 44% of all scored CVEs.

CVSS scores

Assigned byVersionScoreVector
NVD2.06.9AV:L/AC:M/Au:N/C:C/I:C/A:C

Classification

Weakness
  • CWE-264 Permissions, Privileges, and Access Controls

References

  • secunia.com /advisories/33539 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • securityfocus.com /bid/33249 · vdb-entry, x_refsource_BID, x_transferred
  • ubuntu.com /usn/usn-708-1 · vendor-advisory, x_refsource_UBUNTU, x_transferred
  • launchpad.net /bugs/191299 · x_refsource_CONFIRM, x_transferred

Sources

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.