VULNERABILITY INTELLIGENCE
CVE-2013-6402
CVSS score2.1 LOW
EPSS probability0.49%
CISA KEVNot currently listed
Published2014-01-05
Last modified2026-06-17
CVSS vectorAV:L/AC:L/Au:N/C:N/I:P/A:N
Description
base/pkit.py in HP Linux Imaging and Printing (HPLIP) through 3.13.11 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/hp-pkservice.log temporary file.
Weakness classification
- CWE-59: Improper Link Resolution Before File Access ('Link Following')
Primary references
- secalert@redhat.com
- secalert@redhat.com
- secalert@redhat.com
- secalert@redhat.com
- secalert@redhat.com
- secalert@redhat.com
- secalert@redhat.com
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108