CVE-2008-2940

HIGH

7.2

CVSS Severity Score

EPSS Score0.1670%

EPSS Percentile30.89th

Published2008年8月14日

Last Modified2026年4月23日

Vulnerability Description

The alert-mailing implementation in HP Linux Imaging and Printing (HPLIP) 1.6.7 allows local users to gain privileges and send e-mail messages from the root account via vectors related to the setalerts message, and lack of validation of the device URI associated with an event message.

Affected Platforms (CPE)

📦

Linux Imaging And Printing Project

= 1.6.7

References & Advisories

🔗 http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00006.html

🔗 http://secunia.com/advisories/31470

🔗 http://secunia.com/advisories/31499

🔗 http://secunia.com/advisories/32316

🔗 http://secunia.com/advisories/32792

🔗 http://securitytracker.com/id?1020684

🔗 http://www.mandriva.com/security/advisories?name=MDVSA-2008:169

🔗 http://www.redhat.com/support/errata/RHSA-2008-0818.html

Vulnerability Description

Affected Platforms (CPE)

Linux Imaging And Printing Project

References & Advisories

相關漏洞威脅