CVE-2012-6108

NameCVE-2012-6108
DescriptionHP Linux Imaging and Printing (HPLIP) before 3.13.2 uses world-writable permissions for /var/log/hp and /var/log/hp/tmp, which allows local users to delete log files via standard filesystem operations.
SourceCVE (at NVD; CERT, LWN, oss-sec, fulldisc, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, GitHub advisories/code/issues, web search, more)

Vulnerable and fixed packages

The table below lists information on source packages.

Source PackageReleaseVersionStatus
hplip (PTS)buster3.18.12+dfsg0-2fixed
bullseye3.21.2+dfsg1-2fixed
bookworm3.22.10+dfsg0-2fixed
trixie, sid3.22.10+dfsg0-5fixed

The information below is based on the following data on fixed versions.

PackageTypeReleaseFixed VersionUrgencyOriginDebian Bugs
hplipsource(unstable)(not affected)

Notes

- hplip <not-affected> (permissions are 755 on wheezy, sid and experimental)

Search for package or bug name: Reporting problems