CVE-2012-6108

HP Linux Imaging and Printing (HPLIP) before 3.13.2 uses world-writable permissions for /var/log/hp and /var/log/hp/tmp, which allows local users to delete log files via standard filesystem operations.

🔗 References (8)

• secalert@redhathttp://sourceforge.net/projects/hplip/files/hplip/3.13.2/hplip-3.13.2.tar.gz/download
• secalert@redhathttps://bugs.launchpad.net/hplip/+bug/1016507/comments/1
• secalert@redhathttps://bugs.launchpad.net/hplip/+bug/1016507/comments/6
• secalert@redhathttps://bugzilla.redhat.com/show_bug.cgi?id=894283
• af854a3a-2127-422b-91ae-364da2661108http://sourceforge.net/projects/hplip/files/hplip/3.13.2/hplip-3.13.2.tar.gz/download
• af854a3a-2127-422b-91ae-364da2661108https://bugs.launchpad.net/hplip/+bug/1016507/comments/1
• af854a3a-2127-422b-91ae-364da2661108https://bugs.launchpad.net/hplip/+bug/1016507/comments/6
• af854a3a-2127-422b-91ae-364da2661108https://bugzilla.redhat.com/show_bug.cgi?id=894283