CVE-2013-0200
HP Linux Imaging and Printing (HPLIP) through 3.12.4 allows local users to overwrite arbitrary...
HP Linux Imaging and Printing (HPLIP) through 3.12.4 allows local users to overwrite arbitrary files via a symlink attack on the (1) /tmp/hpcupsfilterc_#.bmp, (2) /tmp/hpcupsfilterk_#.bmp, (3) /tmp/hpcups_job#.out, (4) /tmp/hpijs_#####.out, or (5) /tmp/hpps_job#.out temporary file, a different vulnerability than CVE-2011-2722.
Exploit likelihood
What each source reports
NVD Score used
1.9
HP Linux Imaging and Printing (HPLIP) through 3.12.4 allows local users to overwrite arbitrary files via a symlink attack on the (1) /tmp/hpcupsfilterc_#.bmp, (2) /tmp/hpcupsfilterk_#.bmp, (3) /tmp/hpcups_job#.out, (4) /tmp/hpijs_#####.out, or (5) /tmp/hpps_job#.out temporary file, a different vulnerability than CVE-2011-2722.
- Record
CVE-2013-0200- CVSS 2.0
- 1.9 Low
AV:L/AC:M/Au:N/C:N/I:P/A:N - Weakness
- CWE-59
- Updated
- 2026-11-02
CVE List No score
HP Linux Imaging and Printing (HPLIP) through 3.12.4 allows local users to overwrite arbitrary files via a symlink attack on the (1) /tmp/hpcupsfilterc_#.bmp, (2) /tmp/hpcupsfilterk_#.bmp, (3) /tmp/hpcups_job#.out, (4) /tmp/hpijs_#####.out, or (5) /tmp/hpps_job#.out temporary file, a different vulnerability than CVE-2011-2722.
- Record
CVE-2013-0200- Updated
- 2026-11-02
EUVDEUVD-2013-0235 No score
HP Linux Imaging and Printing (HPLIP) through 3.12.4 allows local users to overwrite arbitrary files via a symlink attack on the (1) /tmp/hpcupsfilterc_#.bmp, (2) /tmp/hpcupsfilterk_#.bmp, (3) /tmp/hpcups_job#.out, (4) /tmp/hpijs_#####.out, or (5) /tmp/hpps_job#.out temporary file, a different vulnerability than CVE-2011-2722.
- Record
EUVD-2013-0235- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-3xc3-235x-7q23 No score
HP Linux Imaging and Printing (HPLIP) through 3.12.4 allows local users to overwrite arbitrary...
HP Linux Imaging and Printing (HPLIP) through 3.12.4 allows local users to overwrite arbitrary files via a symlink attack on the (1) /tmp/hpcupsfilterc_#.bmp, (2) /tmp/hpcupsfilterk_#.bmp, (3) /tmp/hpcups_job#.out, (4) /tmp/hpijs_#####.out, or (5) /tmp/hpps_job#.out temporary file, a different vulnerability than CVE-2011-2722.
- Record
GHSA-3xc3-235x-7q23- Weakness
- CWE-59
- Updated
- 2026-11-02
OSV No score
HP Linux Imaging and Printing (HPLIP) through 3.12.4 allows local users to overwrite arbitrary files via a symlink attack on the (1) /tmp/hpcupsfilterc_#.bmp, (2) /tmp/hpcupsfilterk_#.bmp, (3) /tmp/hpcups_job#.out, (4) /tmp/hpijs_#####.out, or (5) /tmp/hpps_job#.out temporary file, a different vulnerability than CVE-2011-2722.
- Record
CVE-2013-0200- Updated
- 2026-11-02
OSVDEBIAN-CVE-2013-0200 No score
HP Linux Imaging and Printing (HPLIP) through 3.12.4 allows local users to overwrite arbitrary files via a symlink attack on the (1) /tmp/hpcupsfilterc_#.bmp, (2) /tmp/hpcupsfilterk_#.bmp, (3) /tmp/hpcups_job#.out, (4) /tmp/hpijs_#####.out, or (5) /tmp/hpps_job#.out temporary file, a different vulnerability than CVE-2011-2722.
- Record
DEBIAN-CVE-2013-0200- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
hplipDebian:12 |
before 3.12.6-3.1 | 3.12.6-3.1 |
hplipDebian:13 |
before 3.12.6-3.1 | 3.12.6-3.1 |
hplipDebian:6.0 From an advisory covering 4 CVEs |
before 3.10.6-2+squeeze2, plus listed versions 3.10.6-23.10.6-2+squeeze1 |
3.10.6-2+squeeze2 |
hplipDebian:7 From an advisory covering 4 CVEs |
before 3.12.6-3.1+deb7u1, plus listed versions 3.12.6-3.1 |
3.12.6-3.1+deb7u1 |
hpijsRed Hat:enterprise_linux:6::client From an advisory covering 2 CVEs |
before 1:3.12.4-4.el6 | 1:3.12.4-4.el6 |
hplipRed Hat:enterprise_linux:6::client From an advisory covering 2 CVEs |
before 0:3.12.4-4.el6 | 0:3.12.4-4.el6 |
hplip-commonRed Hat:enterprise_linux:6::client From an advisory covering 2 CVEs |
before 0:3.12.4-4.el6 | 0:3.12.4-4.el6 |
hplip-debuginfoRed Hat:enterprise_linux:6::client From an advisory covering 2 CVEs |
before 0:3.12.4-4.el6 | 0:3.12.4-4.el6 |
hplip-guiRed Hat:enterprise_linux:6::client From an advisory covering 2 CVEs |
before 0:3.12.4-4.el6 | 0:3.12.4-4.el6 |
hplip-libsRed Hat:enterprise_linux:6::client From an advisory covering 2 CVEs |
before 0:3.12.4-4.el6 | 0:3.12.4-4.el6 |
Show 15 moreShow less
| Package | Affected | Fixed |
|---|---|---|
libsane-hpaioRed Hat:enterprise_linux:6::client From an advisory covering 2 CVEs |
before 0:3.12.4-4.el6 | 0:3.12.4-4.el6 |
hpijsRed Hat:enterprise_linux:6::server From an advisory covering 2 CVEs |
before 1:3.12.4-4.el6 | 1:3.12.4-4.el6 |
hplipRed Hat:enterprise_linux:6::server From an advisory covering 2 CVEs |
before 0:3.12.4-4.el6 | 0:3.12.4-4.el6 |
hplip-commonRed Hat:enterprise_linux:6::server From an advisory covering 2 CVEs |
before 0:3.12.4-4.el6 | 0:3.12.4-4.el6 |
hplip-debuginfoRed Hat:enterprise_linux:6::server From an advisory covering 2 CVEs |
before 0:3.12.4-4.el6 | 0:3.12.4-4.el6 |
hplip-guiRed Hat:enterprise_linux:6::server From an advisory covering 2 CVEs |
before 0:3.12.4-4.el6 | 0:3.12.4-4.el6 |
hplip-libsRed Hat:enterprise_linux:6::server From an advisory covering 2 CVEs |
before 0:3.12.4-4.el6 | 0:3.12.4-4.el6 |
libsane-hpaioRed Hat:enterprise_linux:6::server From an advisory covering 2 CVEs |
before 0:3.12.4-4.el6 | 0:3.12.4-4.el6 |
hpijsRed Hat:enterprise_linux:6::workstation From an advisory covering 2 CVEs |
before 1:3.12.4-4.el6 | 1:3.12.4-4.el6 |
hplipRed Hat:enterprise_linux:6::workstation From an advisory covering 2 CVEs |
before 0:3.12.4-4.el6 | 0:3.12.4-4.el6 |
hplip-commonRed Hat:enterprise_linux:6::workstation From an advisory covering 2 CVEs |
before 0:3.12.4-4.el6 | 0:3.12.4-4.el6 |
hplip-debuginfoRed Hat:enterprise_linux:6::workstation From an advisory covering 2 CVEs |
before 0:3.12.4-4.el6 | 0:3.12.4-4.el6 |
hplip-guiRed Hat:enterprise_linux:6::workstation From an advisory covering 2 CVEs |
before 0:3.12.4-4.el6 | 0:3.12.4-4.el6 |
hplip-libsRed Hat:enterprise_linux:6::workstation From an advisory covering 2 CVEs |
before 0:3.12.4-4.el6 | 0:3.12.4-4.el6 |
libsane-hpaioRed Hat:enterprise_linux:6::workstation From an advisory covering 2 CVEs |
before 0:3.12.4-4.el6 | 0:3.12.4-4.el6 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2013-0200 is a low vulnerability (CVSS 1.9) in Hp Linux Imaging And Printing Project, published March 6, 2013. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.38%, the 32nd percentile. Fixed in hplip 3.12.6-3.1.
References
secunia.com/advisories/55083
ubuntu.com/usn/USN-1981-1
bugzilla.redhat.com/show_bug.cgi?id=902163
debian.org/security/2013/dsa-2829
mandriva.com/security/advisories?name=MDVSA-2013:088
hplipopensource.com/hplip-web/release_notes.html
Show 15 moreShow less
wiki.mageia.org/en/Support/Advisories/MGASA-2013-0072
nvd.nist.gov/vuln/detail/CVE-2013-0200
github.com/advisories/GHSA-3xc3-235x-7q23
security-tracker.debian.org/tracker/CVE-2013-0200
access.redhat.com/errata/RHSA-2013:0500
access.redhat.com/security/updates/classification
bugzilla.redhat.com/show_bug.cgi?id=683007
bugzilla.redhat.com/show_bug.cgi?id=725830
bugzilla.redhat.com/show_bug.cgi?id=731900
security.access.redhat.com/data/csaf/v2/advisories/2013/rhsa-2013_0500.json
access.redhat.com/security/cve/CVE-2011-2722
cve.org/CVERecord?id=CVE-2011-2722
nvd.nist.gov/vuln/detail/CVE-2011-2722
access.redhat.com/security/cve/CVE-2013-0200
cve.org/CVERecord?id=CVE-2013-0200