REDHAT-BUG-662740
First published: Mon Dec 13 2010(Updated: )
Sebastian Krahmer reported a flaw in how hplip discovered SNMP devices. If certain hplip commands were run that queried SNMP devices, and a malicious user were able to send crafted SNMP responses, it could cause the running hplip tool to crash or, possibly, execute arbitrary code with the privileges of the user running the tool. Acknowledgements: Red Hat would like to thank Sebastian Krahmer of the SuSE Security Team for reporting this issue.
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Hewlett-Packard HPLIP |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://bugzilla.redhat.com/show_bug.cgi/attachment.cgi?id=468455&action=diff
- https://bugzilla.redhat.com/show_bug.cgi/attachment.cgi?id=468455&action=edit
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=670252
- https://rhn.redhat.com/errata/RHSA-2011-0154.html
- https://bugzilla.redhat.com/show_bug.cgi?id=662740
- agent/type
- agent/first-publish-date
- agent/last-modified-date
- collector/redhat-bugzilla
- source/Red Hat
- alias/CVE-2010-4267
- agent/references
- agent/severity
- agent/description
- agent/event
- agent/trending
- agent/source
- agent/softwarecombine
- agent/tags
- agent/guess-ai
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- vendor/hp
- canonical/hewlett-packard hplip