CVE-2012-6108

Severity: low (CVSS 2.1 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.5% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2014-02-15 · updated 2026-06-16
Weakness: CWE-264

Description

HP Linux Imaging and Printing (HPLIP) before 3.13.2 uses world-writable permissions for /var/log/hp and /var/log/hp/tmp, which allows local users to delete log files via standard filesystem operations.

Affected products

HP Linux Imaging And Printing Project: through 3.13.1; 1.0, 2.0, 2.7.10, 3.9.2, 3.9.4, 3.9.4b (+21)

References

http://sourceforge.net/projects/hplip/files/hplip/3.13.2/hplip-3.13.2.tar.gz/download
https://bugs.launchpad.net/hplip/+bug/1016507/comments/1
https://bugs.launchpad.net/hplip/+bug/1016507/comments/6
https://bugzilla.redhat.com/show_bug.cgi?id=894283
http://sourceforge.net/projects/hplip/files/hplip/3.13.2/hplip-3.13.2.tar.gz/download
https://bugs.launchpad.net/hplip/+bug/1016507/comments/1
https://bugs.launchpad.net/hplip/+bug/1016507/comments/6
https://bugzilla.redhat.com/show_bug.cgi?id=894283

Get alerted when CVE-2012-6108 or the next vulnerability affects your stack