CVE-2009-0122

Severity: medium (CVSS 6.9 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.5% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2009-01-15 · updated 2026-06-16
Weakness: CWE-264

Description

hplip.postinst in HP Linux Imaging and Printing (HPLIP) 2.7.7 and 2.8.2 on Ubuntu allows local users to change the ownership of arbitrary files via unspecified manipulations in advance of an HPLIP installation or upgrade by an administrator, related to the product's attempt to correct the ownership of its configuration files within home directories.

Affected products

HPLIP: 2.7.7, 2.8.2

References

http://secunia.com/advisories/33539
http://www.securityfocus.com/bid/33249
http://www.ubuntu.com/usn/usn-708-1
https://launchpad.net/bugs/191299
http://secunia.com/advisories/33539
http://www.securityfocus.com/bid/33249
http://www.ubuntu.com/usn/usn-708-1
https://launchpad.net/bugs/191299

Get alerted when CVE-2009-0122 or the next vulnerability affects your stack