Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The alert-mailing implementation in HP Linux Imaging and Printing (HPLIP) 1.6.7 allows local users to gain privileges and send e-mail messages from the root account via vectors related to the setalerts message, and lack of validation of the device URI associated with an event message.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
HP HPLIP 本地用户权限提升漏洞
Vulnerability Description
HP Linux Imaging and Printing(HPLIP)是由HP公司发起的一个项目，目标是在Linux下实现HP设备的打印、扫描、传真等功能。 HPLIP 1.6.7版本中alert-mailing implementation存在本地用户权限提升漏洞。 利用setalerts信息，由于HPLIP缺少对带有事件信息的驱动URI的验证，本地用户利可获得特权并发送来自root帐户的邮件信息。
CVSS Information
N/A
Vulnerability Type
N/A