Weekly edition	Kernel	Security	Distributions	Contact Us	Search
Archives	Calendar	Subscribe	Write for LWN	LWN.net FAQ	Sponsors

hplip: privilege escalation

Package(s):

hplip

CVE #(s):

Created:

January 14, 2009

Updated:

January 16, 2009

Description:

The hplip installation script was caught in the act of modifying permissions on files in users' home directories. This behavior could be exploited by a local user to change permissions on arbitrary files.

Alerts:

Ubuntu

USN-708-1

2009-01-13

(Log in to post comments)

hplip: privilege escalation

Posted Jan 16, 2009 18:02 UTC (Fri) by nlucas (subscriber, #33793) [Link]

This is scary!

It should be expected that a minimum of code audit/testing was done on the installer to not bork user systems (not even talking about security here).

It's one more of those gross errors that mine ubuntu credibility.

As a [K]Ubuntu user, I have to say I like the system very much, but...