Back to CVE Browser

CVE-2008-2940

HIGH

7.2

CVSS Severity Score

EPSS Score0.1670%

EPSS Percentile30.89th

PublishedAug 14, 2008

Last ModifiedApr 23, 2026

Vulnerability Description

The alert-mailing implementation in HP Linux Imaging and Printing (HPLIP) 1.6.7 allows local users to gain privileges and send e-mail messages from the root account via vectors related to the setalerts message, and lack of validation of the device URI associated with an event message.

Affected Platforms (CPE)

📦

Hp

Linux Imaging And Printing Project

= 1.6.7

References & Advisories

🔗 http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00006.html

🔗 http://secunia.com/advisories/31470

🔗 http://secunia.com/advisories/31499

🔗 http://secunia.com/advisories/32316

🔗 http://secunia.com/advisories/32792

🔗 http://securitytracker.com/id?1020684

🔗 http://www.mandriva.com/security/advisories?name=MDVSA-2008:169

🔗 http://www.redhat.com/support/errata/RHSA-2008-0818.html

Related Vulnerabilities

CVE-2007-52087.6

hpssd in Hewlett-Packard Linux Imaging and Printing Project (hplip) 1.x and 2.x before 2.7.10 allows context-dependent attackers t...

CVE-2008-535310.0

The Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; and SDK and...

CVE-2008-535510.0

The "Java Update" feature for Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 1...

CVE-2008-034310.0

Unspecified vulnerability in the Oracle Spatial component in Oracle Database 9.0.1.5 FIPS+, 9.2.0.8, 9.2.0.8DV, and 10.1.0.5 has u...

CVE-2008-2940 Detail & Impact Analysis | CVSS 7.2 (HIGH) | Cyber-Sec.Space | Cyber-Sec.Space