CVE-2013-6402

base/pkit.py in HP Linux Imaging and Printing (HPLIP) through 3.13.11 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/hp-pkservice.log temporary file.
Link Following
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
2.1 UNKNOWN
LOCAL
LOW
AV:L/AC:L/Au:N/C:N/I:P/A:N
redhatCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 21%
VendorProductVersion
hplinux_imaging_and_printing_project
𝑥
≤ 3.13.11
hplinux_imaging_and_printing_project
3.9.2
hplinux_imaging_and_printing_project
3.9.4
hplinux_imaging_and_printing_project
3.9.4:b
hplinux_imaging_and_printing_project
3.9.4b:b
hplinux_imaging_and_printing_project
3.9.6
hplinux_imaging_and_printing_project
3.9.8
hplinux_imaging_and_printing_project
3.9.10
hplinux_imaging_and_printing_project
3.9.12
hplinux_imaging_and_printing_project
3.10.2
hplinux_imaging_and_printing_project
3.10.5
hplinux_imaging_and_printing_project
3.10.6
hplinux_imaging_and_printing_project
3.10.9
hplinux_imaging_and_printing_project
3.11.1
hplinux_imaging_and_printing_project
3.11.3
hplinux_imaging_and_printing_project
3.11.3:a
hplinux_imaging_and_printing_project
3.11.3a:a
hplinux_imaging_and_printing_project
3.11.5
hplinux_imaging_and_printing_project
3.11.7
hplinux_imaging_and_printing_project
3.11.10
hplinux_imaging_and_printing_project
3.11.12
hplinux_imaging_and_printing_project
3.12.2
hplinux_imaging_and_printing_project
3.12.4
hplinux_imaging_and_printing_project
3.12.6
hplinux_imaging_and_printing_project
3.12.9
hplinux_imaging_and_printing_project
3.12.10
hplinux_imaging_and_printing_project
3.12.10:a
hplinux_imaging_and_printing_project
3.12.11
hplinux_imaging_and_printing_project
3.13.2
hplinux_imaging_and_printing_project
3.13.3
hplinux_imaging_and_printing_project
3.13.4
hplinux_imaging_and_printing_project
3.13.5
hplinux_imaging_and_printing_project
3.13.6
hplinux_imaging_and_printing_project
3.13.7
hplinux_imaging_and_printing_project
3.13.8
hplinux_imaging_and_printing_project
3.13.9
hplinux_imaging_and_printing_project
3.13.10
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
hplip
bullseye
3.21.2+dfsg1-2
fixed
bookworm
3.22.10+dfsg0-2
fixed
sid
3.22.10+dfsg0-5.1
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
hplip
saucy
Fixed 3.13.9-1ubuntu0.1
released
raring
ignored
quantal
Fixed 3.12.6-3ubuntu4.3
released
precise
Fixed 3.12.2-1ubuntu3.4
released
lucid
Fixed 3.10.2-2ubuntu2.5
released