The remote CentOS system is missing a security update which has been documented in Red Hat advisory RHSA-2008-0818.

USN-674-1 provided packages to fix vulnerabilities in HPLIP. Due to an internal archive problem, the updates for Ubuntu 7.10 would not install properly. This update provides fixed packages for Ubuntu 7.10.

We apologize for the inconvenience.

It was discovered that the hpssd tool of hplip did not validate privileges in the alert-mailing function. A local attacker could exploit this to gain privileges and send e-mail messages from the account of the hplip user. This update alters hplip behaviour by preventing users from setting alerts and by moving alert configuration to a root-controlled /etc/hp/alerts.conf file. (CVE-2008-2940)

It was discovered that the hpssd tool of hplip did not correctly handle certain commands. A local attacker could use a specially crafted packet to crash hpssd, leading to a denial of service. (CVE-2008-2941).

Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

リモートの CentOS システムには、Red Hat アドバイザリ RHSA-2008-0818 に文書化されているセキュリティ更新がありません。

This update of hplip does not allow to send alert mails as user anymore (CVE-2008-2940) and fixes a denial-of-service defect (CVE-2008-2941).

This update of hplip does not allow to send alert mails as user anymore (CVE-2008-2940) and fixes a denial-of-service defect.
(CVE-2008-2941)

Marc Schoenefeld of the Red Hat Security Response Team discovered a vulnerability in the hplip alert-mailing functionality that could allow a local attacker to elevate their privileges by using specially crafted packets to trigger alert mails that are sent by the root account (CVE-2008-2940).

Another vulnerability was discovered by Marc Schoenefeld in the hpssd message parser that could allow a local attacker to stop the hpssd process by sending specially-craftd packets, causing a denial of service (CVE-2008-2941).

The updated packages have been patched to correct these issues.

It was discovered that the hpssd tool of hplip did not validate privileges in the alert-mailing function. A local attacker could exploit this to gain privileges and send e-mail messages from the account of the hplip user. This update alters hplip behaviour by preventing users from setting alerts and by moving alert configuration to a root-controlled /etc/hp/alerts.conf file. (CVE-2008-2940)

It was discovered that the hpssd tool of hplip did not correctly handle certain commands. A local attacker could use a specially crafted packet to crash hpssd, leading to a denial of service.
(CVE-2008-2941).

Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Red Hat セキュリティアドバイザリ 2008:0818 から：

いくつかのセキュリティ問題を修正する更新済みの hplip パッケージが、Red Hat Enterprise Linux 5 で現在利用可能です。

Red Hat セキュリティレスポンスチームは、この更新は重要度中のセキュリティ影響があると評価しています。

hplip（Hewlett-Packard Linux Imaging and Printing）パッケージは、Hewlett-Packard のプリンターや多機能の周辺機器に対するドライバーを提供します。

hplip のアラートメールの機能で、欠陥が発見されました。ローカルの攻撃者が、特別に細工されたパケットを使用して権限を昇格し、 root アカウントから送信されるアラートメールをトリガーする可能性があります。(CVE-2008-2940)

hpssd メッセージパーサーに欠陥が発見されました。特別に細工されたパケットを送信することにより、ローカルの攻撃者がサービス拒否を引き起こし、hpssd プロセスを停止させる可能性があります。(CVE-2008-2941)

hplip のユーザーは、バックポートされたパッチが含まれるこれらの更新済みパッケージへアップグレードし、これらの問題を修正する必要があります。

hplip のアラートメールの機能で、欠陥が発見されました。ローカルの攻撃者が、特別に細工されたパケットを使用して権限を昇格し、 root アカウントから送信されるアラートメールをトリガーする可能性があります。（CVE-2008-2940）

hpssd メッセージパーサーに欠陥が発見されました。特別に細工されたパケットを送信することにより、ローカルの攻撃者がサービス拒否を引き起こし、hpssd プロセスを停止させる可能性があります。（CVE-2008-2941）

在 hplip alert-mailing 功能中發現一個瑕疵。本機攻擊者可使用特製封包來觸發 root 帳戶傳送的警示郵件，進而提升其權限。(CVE-2008-2940)

在 hpssd 訊息剖析器中發現一個瑕疵。透過傳送特製封包，本機攻擊者可造成拒絕服務，而停止 hpssd 處理程序。(CVE-2008-2941)

來自 Red Hat 安全性公告 2008:0818：

現已提供適用於 Red Hat Enterprise Linux 5 的更新版 hplip 套件，可修正多種安全性問題。

Red Hat 安全性回應團隊已將此更新評等為具有中等安全性影響。

hplip (Hewlett-Packard Linux Imaging and Printing) 套件提供適用於 Hewlett-Packard (HP) 印表機和多功能週邊設備的驅動程式。

在 hplip alert-mailing 功能中發現一個瑕疵。本機攻擊者可使用特製封包來觸發 root 帳戶傳送的警示郵件，進而提升其權限。(CVE-2008-2940)

在 hpssd 訊息剖析器中發現一個瑕疵。透過傳送特製封包，本機攻擊者可造成拒絕服務，而停止 hpssd 處理程序。(CVE-2008-2941)

hplip 的使用者應升級至這些更新版套件，其中包含可更正這些問題的反向移植修補程式。

在 hplip 警报邮件功能中发现一个缺陷。本地攻击者可以使用特别构建的程序包提升其权限，以触发由根帐户发送的警报邮件。(CVE-2008-2940)

在 hpssd 消息解析器中发现一个缺陷。通过发送特别构建的包，本地攻击者可以造成拒绝服务，从而终止 hpssd 流程。(CVE-2008-2941)

来自 Red Hat 安全公告 2008:0818：

更新后的 hplip 程序包修复了多个安全问题，现在可用于 Red Hat Enterprise Linux 5。

Red Hat 安全响应团队将此更新评级为具有中等安全影响。

hplip (Hewlett-Packard Linux Imaging and Printing) 程序包为 Hewlett-Packard 打印机和多功能外设提供驱动程序。

在 hplip 警报邮件功能中发现一个缺陷。本地攻击者可以使用特别构建的程序包提升其权限，以触发由根帐户发送的警报邮件。(CVE-2008-2940)

在 hpssd 消息解析器中发现一个缺陷。通过发送特别构建的包，本地攻击者可以造成拒绝服务，从而终止 hpssd 流程。(CVE-2008-2941)

hplip 用户应升级这些更新后的程序包，其中包含用于修正这些问题的向后移植的修补程序。

From Red Hat Security Advisory 2008:0818 :

Updated hplip packages that fix various security issues are now available for Red Hat Enterprise Linux 5.

This update has been rated as having moderate security impact by the Red Hat Security Response Team.

The hplip (Hewlett-Packard Linux Imaging and Printing) packages provide drivers for Hewlett-Packard printers and multifunction peripherals.

A flaw was discovered in the hplip alert-mailing functionality. A local attacker could elevate their privileges by using specially crafted packets to trigger alert mails, which are sent by the root account. (CVE-2008-2940)

A flaw was discovered in the hpssd message parser. By sending specially crafted packets, a local attacker could cause a denial of service, stopping the hpssd process. (CVE-2008-2941)

Users of hplip should upgrade to these updated packages, which contain backported patches to correct these issues.

A flaw was discovered in the hplip alert-mailing functionality. A local attacker could elevate their privileges by using specially crafted packets to trigger alert mails, which are sent by the root account. (CVE-2008-2940)

A flaw was discovered in the hpssd message parser. By sending specially crafted packets, a local attacker could cause a denial of service, stopping the hpssd process. (CVE-2008-2941)

Secunia reports :

A security issue has been reported in hplip, which can be exploited by malicious, local users to cause a DoS.

The security issue is caused due to an error within hpssd.py when parsing certain requests. This can be exploited to crash the service by sending specially crafted requests to the default port 2207/TCP.

Updated hplip packages that fix various security issues are now available for Red Hat Enterprise Linux 5.

This update has been rated as having moderate security impact by the Red Hat Security Response Team.

The hplip (Hewlett-Packard Linux Imaging and Printing) packages provide drivers for Hewlett-Packard printers and multifunction peripherals.

A flaw was discovered in the hplip alert-mailing functionality. A local attacker could elevate their privileges by using specially crafted packets to trigger alert mails, which are sent by the root account. (CVE-2008-2940)

A flaw was discovered in the hpssd message parser. By sending specially crafted packets, a local attacker could cause a denial of service, stopping the hpssd process. (CVE-2008-2941)

Users of hplip should upgrade to these updated packages, which contain backported patches to correct these issues.

ID	名稱	產品	系列	已發布	已更新	嚴重性
43705	CentOS 5 : hplip (CESA-2008-0818)	Nessus	CentOS Local Security Checks	2010/1/6	2021/1/4	high
37203	Ubuntu 7.10 : hplip vulnerabilities (USN-674-2)	Nessus	Ubuntu Local Security Checks	2009/4/23	2021/1/19	high
43705	CentOS 5：hplip（CESA-2008-0818）	Nessus	CentOS Local Security Checks	2010/1/6	2021/1/4	high
34430	openSUSE 10 Security Update : hplip (hplip-5552)	Nessus	SuSE Local Security Checks	2008/10/16	2021/1/14	high
34431	SuSE 10 Security Update : hplip (ZYPP Patch Number 5556)	Nessus	SuSE Local Security Checks	2008/10/16	2021/1/14	high
36743	Mandriva Linux Security Advisory : hplip (MDVSA-2008:169)	Nessus	Mandriva Local Security Checks	2009/4/23	2021/1/6	high
37887	Ubuntu 6.06 LTS / 7.10 / 8.04 LTS : hplip vulnerabilities (USN-674-1)	Nessus	Ubuntu Local Security Checks	2009/4/23	2021/1/19	high
67736	Oracle Linux 5：hplip（ELSA-2008-0818）	Nessus	Oracle Linux Local Security Checks	2013/7/12	2021/1/14	high
60463	Scientific Linux セキュリティ更新：SL5.x i386/x86_64 の hplip	Nessus	Scientific Linux Local Security Checks	2012/8/1	2021/1/14	high
60463	Scientific Linux 安全性更新：SL5.x i386/x86_64 上的 hplip	Nessus	Scientific Linux Local Security Checks	2012/8/1	2021/1/14	high
67736	Oracle Linux 5 : hplip (ELSA-2008-0818)	Nessus	Oracle Linux Local Security Checks	2013/7/12	2021/1/14	high
60463	Scientific Linux 安全更新：SL5.x i386/x86_64 中的 hplip	Nessus	Scientific Linux Local Security Checks	2012/8/1	2021/1/14	high
67736	Oracle Linux 5：hplip (ELSA-2008-0818)	Nessus	Oracle Linux Local Security Checks	2013/7/12	2021/1/14	high
67736	Oracle Linux 5 : hplip (ELSA-2008-0818)	Nessus	Oracle Linux Local Security Checks	2013/7/12	2021/1/14	high
60463	Scientific Linux Security Update : hplip on SL5.x i386/x86_64	Nessus	Scientific Linux Local Security Checks	2012/8/1	2021/1/14	high
34977	FreeBSD : hplip -- hpssd Denial of Service (37940643-be1b-11dd-a578-0030843d3802)	Nessus	FreeBSD Local Security Checks	2008/12/1	2021/1/6	high
33884	RHEL 5 : hplip (RHSA-2008:0818)	Nessus	Red Hat Local Security Checks	2008/8/14	2021/1/14	high

偵測

搜尋 Plugin

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high