{"id":"CVE-2011-2722","aliases":["DEBIAN-CVE-2011-2722","EUVD-2011-2700","GHSA-mqf8-fvgr-vqf4","RHSA-2013:0133","RHSA-2013:0500","openSUSE-SU-2024:10083-1"],"status":"published","title":"The send_data_to_stdout function in prnt/hpijs/hpcupsfax.cpp in HP Linux Imaging and Printing ...","description":"The send_data_to_stdout function in prnt/hpijs/hpcupsfax.cpp in HP Linux Imaging and Printing (HPLIP) 3.x before 3.11.10 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/hpcupsfax.out temporary file.","severity":{"version":"2.0","score":1.2,"vector":"AV:L/AC:H/Au:N/C:N/I:P/A:N","level":"low","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.00444,"percentile":0.38812,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-59"],"published":"2012-05-25T20:00:00Z","modified":"2026-11-02T17:00:06Z","fixes":[{"ecosystem":"Debian:12","package":"hplip","fixed_in":["3.11.10-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"hplip","fixed_in":["3.11.10-1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:5::client","package":"hpijs3","fixed_in":["1:3.9.8-15.el5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:5::client","package":"hplip3","fixed_in":["0:3.9.8-15.el5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:5::client","package":"hplip3-common","fixed_in":["0:3.9.8-15.el5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:5::client","package":"hplip3-debuginfo","fixed_in":["0:3.9.8-15.el5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:5::client","package":"hplip3-gui","fixed_in":["0:3.9.8-15.el5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:5::client","package":"hplip3-libs","fixed_in":["0:3.9.8-15.el5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:5::client","package":"libsane-hpaio3","fixed_in":["0:3.9.8-15.el5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:5::server","package":"hpijs3","fixed_in":["1:3.9.8-15.el5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:5::server","package":"hplip3","fixed_in":["0:3.9.8-15.el5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:5::server","package":"hplip3-common","fixed_in":["0:3.9.8-15.el5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:5::server","package":"hplip3-debuginfo","fixed_in":["0:3.9.8-15.el5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:5::server","package":"hplip3-gui","fixed_in":["0:3.9.8-15.el5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:5::server","package":"hplip3-libs","fixed_in":["0:3.9.8-15.el5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:5::server","package":"libsane-hpaio3","fixed_in":["0:3.9.8-15.el5"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"hplip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.10-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"hplip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.10-1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"hpijs3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.9.8-15.el5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"hplip3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.9.8-15.el5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"hplip3-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.9.8-15.el5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"hplip3-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.9.8-15.el5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"hplip3-gui","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.9.8-15.el5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"hplip3-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.9.8-15.el5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"libsane-hpaio3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.9.8-15.el5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"hpijs3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.9.8-15.el5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"hplip3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.9.8-15.el5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"hplip3-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.9.8-15.el5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"hplip3-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.9.8-15.el5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"hplip3-gui","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.9.8-15.el5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"hplip3-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.9.8-15.el5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"libsane-hpaio3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.9.8-15.el5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"hpijs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.12.4-4.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"hplip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.4-4.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"hplip-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.4-4.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"hplip-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.4-4.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"hplip-gui","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.4-4.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"hplip-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.4-4.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"libsane-hpaio","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.4-4.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"hpijs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.12.4-4.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"hplip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.4-4.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"hplip-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.4-4.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"hplip-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.4-4.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"hplip-gui","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.4-4.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"hplip-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.4-4.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"libsane-hpaio","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.4-4.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"hpijs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.12.4-4.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"hplip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.4-4.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"hplip-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.4-4.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"hplip-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.4-4.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"hplip-gui","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.4-4.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"hplip-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.4-4.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"libsane-hpaio","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.4-4.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"hplip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.16.10-1.1"}]}],"bundled":8}],"products":[{"vendor":"hp","product":"linux_imaging_and_printing_project"}],"references":[{"url":"https://bugzilla.novell.com/show_bug.cgi?id=704608","tags":["x_refsource_CONFIRM","x_transferred","report"]},{"url":"http://secunia.com/advisories/55083","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","advisory"]},{"url":"http://www.ubuntu.com/usn/USN-1981-1","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2013-0133.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","advisory"]},{"url":"https://bugs.launchpad.net/hplip/+bug/809904","tags":["x_refsource_CONFIRM","x_transferred","web"]},{"url":"https://bugzilla.redhat.com/attachment.cgi?id=515866\u0026action=diff","tags":["x_refsource_CONFIRM","x_transferred","report"]},{"url":"http://hplipopensource.com/hplip-web/release_notes.html","tags":["x_refsource_CONFIRM","x_transferred","Patch","Vendor Advisory","advisory","fix"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=725830","tags":["x_refsource_CONFIRM","x_transferred","report"]},{"url":"http://security.gentoo.org/glsa/glsa-201203-17.xml","tags":["vendor-advisory","x_refsource_GENTOO","x_transferred","advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2011/07/26/14","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"http://secunia.com/advisories/48441","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2011-2722","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2013:0133","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2013:0500","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2011-2722","tags":["report"]},{"url":"https://github.com/advisories/GHSA-mqf8-fvgr-vqf4"},{"url":"https://security-tracker.debian.org/tracker/CVE-2011-2722","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#low","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=501834","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2013/rhsa-2013_0133.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2011-2722","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=683007","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=731900","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=902163","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2013/rhsa-2013_0500.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2013-0200","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2013-0200","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2013-0200","tags":["advisory"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2004-0801","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-4267","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-2697","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-2722","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-4325","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-6402","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-6427","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0839","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2011-2722","description":"The send_data_to_stdout function in prnt/hpijs/hpcupsfax.cpp in HP Linux Imaging and Printing (HPLIP) 3.x before 3.11.10 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/hpcupsfax.out temporary file.","status":"published","published":"2012-05-25T20:00:00Z","modified":"2024-08-06T23:08:23.81Z","updated_at":"2026-11-02T14:35:36.968002Z"}],"euvd":[{"id":"EUVD-2011-2700","description":"The send_data_to_stdout function in prnt/hpijs/hpcupsfax.cpp in HP Linux Imaging and Printing (HPLIP) 3.x before 3.11.10 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/hpcupsfax.out temporary file.","status":"published","published":"2012-05-25T20:00:00Z","modified":"2024-08-06T23:08:23Z","updated_at":"2026-11-03T01:39:54.68331Z"}],"ghsa":[{"id":"GHSA-mqf8-fvgr-vqf4","title":"The send_data_to_stdout function in prnt/hpijs/hpcupsfax.cpp in HP Linux Imaging and Printing ...","description":"The send_data_to_stdout function in prnt/hpijs/hpcupsfax.cpp in HP Linux Imaging and Printing (HPLIP) 3.x before 3.11.10 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/hpcupsfax.out temporary file.","status":"published","published":"2022-05-17T05:02:42Z","modified":"2023-02-10T05:06:57Z","cwes":["CWE-59"],"updated_at":"2026-11-02T14:54:03.327923Z"}],"nvd":[{"id":"CVE-2011-2722","description":"The send_data_to_stdout function in prnt/hpijs/hpcupsfax.cpp in HP Linux Imaging and Printing (HPLIP) 3.x before 3.11.10 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/hpcupsfax.out temporary file.","status":"published","published":"2012-05-25T20:55:01.477Z","modified":"2026-06-16T23:31:52.273Z","cvss":[{"version":"2.0","score":1.2,"vector":"AV:L/AC:H/Au:N/C:N/I:P/A:N","level":"low","assessor":"primary"}],"cwes":["CWE-59"],"updated_at":"2026-11-02T14:02:12.272092Z"}],"osv":[{"id":"CVE-2011-2722","description":"The send_data_to_stdout function in prnt/hpijs/hpcupsfax.cpp in HP Linux Imaging and Printing (HPLIP) 3.x before 3.11.10 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/hpcupsfax.out temporary file.","status":"published","published":"2012-05-25T20:55:01Z","modified":"2026-04-10T03:41:53.423206Z","updated_at":"2026-11-02T15:43:58.279353Z"},{"id":"DEBIAN-CVE-2011-2722","description":"The send_data_to_stdout function in prnt/hpijs/hpcupsfax.cpp in HP Linux Imaging and Printing (HPLIP) 3.x before 3.11.10 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/hpcupsfax.out temporary file.","status":"published","published":"2012-05-25T20:55:01.477Z","modified":"2026-11-02T17:00:06.810045222Z","updated_at":"2026-11-02T17:22:41.040735Z"},{"id":"openSUSE-SU-2024:10083-1","title":"hplip-3.16.10-1.1 on GA media","description":"These are all security issues fixed in the hplip-3.16.10-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T02:57:27.754027Z","updated_at":"2026-11-02T16:58:33.135986Z"},{"id":"RHSA-2013:0133","title":"Red Hat Security Advisory: hplip3 security and bug fix update","status":"published","published":"2024-09-15T20:09:22Z","modified":"2026-06-26T10:20:29Z","updated_at":"2026-11-02T15:53:01.495018Z"},{"id":"RHSA-2013:0500","title":"Red Hat Security Advisory: hplip security, bug fix and enhancement update","status":"published","published":"2024-09-15T20:14:11Z","modified":"2026-06-26T10:20:50Z","updated_at":"2026-11-02T15:53:01.495018Z"}]}}