Technical Description

A vulnerability has been identified in Fedora, which could be exploited by local attackers to obtain elevated privileges. This issue is caused by an error in HPLIP. For additional information, see : VUPEN/ADV-2007-3479

Affected Products

Fedora Core 6

Solution

Upgrade the affected packages :

http://download.fedora.redhat.com/pub/fedora/linux/core/updates/6/

cb5fa8536fe80120a9bc69ffc7e36bde24a9121d SRPMS/hplip-1.7.4a-3.fc6.src.rpm
cb5fa8536fe80120a9bc69ffc7e36bde24a9121d noarch/hplip-1.7.4a-3.fc6.src.rpm
d530727f3d77a2d071e3c312f7ca46926a4c92d1 ppc/debug/hplip-debuginfo-1.7.4a-3.fc6.ppc.rpm
4bdf8040c8ba9327df24b686e6ef0deea8a9209e ppc/hplip-1.7.4a-3.fc6.ppc.rpm
0be70cceeab694449748903d8ea0e6cfef4d683c ppc/hpijs-1.7.4a-3.fc6.ppc.rpm
ee579ea6439d9e3509600267ef5292fe6e86857f ppc/libsane-hpaio-1.7.4a-3.fc6.ppc.rpm
9c4b3de556ef9fe9bd072ae53439ad47c9b667c2 x86_64/libsane-hpaio-1.7.4a-3.fc6.x86_64.rpm
dd50989c6069bbc14e71c8c68b0125586a810439 x86_64/hpijs-1.7.4a-3.fc6.x86_64.rpm
671ee1bc6068a1cd570afa759c8ded897b2fb4bf x86_64/hplip-1.7.4a-3.fc6.x86_64.rpm
32ad3c3eb164ddc57efdb34da6c0166c82487c45 x86_64/debug/hplip-debuginfo-1.7.4a-3.fc6.x86_64.rpm
669b68919ff78c93a32499262539b2e5026f87b5 i386/hplip-1.7.4a-3.fc6.i386.rpm
830186965877a27ab0fe2d73156628e95c350230 i386/debug/hplip-debuginfo-1.7.4a-3.fc6.i386.rpm
880fb898d2065f3b6d95349d7b0777a9d410e42a i386/libsane-hpaio-1.7.4a-3.fc6.i386.rpm
e5e8e25348ef0e445c5afad4b6d8cc91c001d233 i386/hpijs-1.7.4a-3.fc6.i386.rpm

References

http://www.vupen.com/english/advisories/2007/3514
https://www.redhat.com/archives/fedora-package-announce/2007-October/msg00217.html

ChangeLog

2007-10-17 : Initial release

Vulnerability Management

Subscribe to VUPEN VNS and receive real-time alerts when new advisories or patches relevant to your systems and network configurations are available.

Feedback

If you have additional information or corrections for this security advisory please submit them via our contact form.