FrSIRT - Redhat Security Update Fixes hplip Privilege Escalation and DoS

Two vulnerabilities have been identified in Red Hat Enterprise Linux, which could be exploited by local attackers to cause a denial of service or gain elevated privileges. The first issue is caused by an error in the hplip (Hewlett-Packard Linux Imaging and Printing) alert-mailing functionality, which could be exploited by local attackers to elevate their privileges by using specially-crafted packets to trigger alert mails that are sent by the root account. The second vulnerability is caused by an error in the hpssd message parser, which could be exploited by local attackers to stop the hpssd process via a specially crafted packet....

Related Items