CVE-2008-2941

Published: Aug 14, 2008Modified: Apr 23, 2026

4.9

Vector

AV:L/AC:L/Au:N/C:N/I:N/A:C

Exploitability: 3.9 / Impact: 6.9

Source: NVD

Description

The hpssd message parser in hpssd.py in HP Linux Imaging and Printing (HPLIP) 1.6.7 allows local users to cause a denial of service (process stop) via a crafted packet, as demonstrated by sending "msg=0" to TCP port 2207.

Affected (1)

Products: Hp: Linux Imaging And Printing Project

1 product

Linux Imaging And Printing Project

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Hp Linux Imaging And Printing Project	Version 1.6.7

Related CWEs

CWE-20

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (28)

http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00006.html

Source: secalert@redhat.com

http://secunia.com/advisories/31470

Source: secalert@redhat.com

http://secunia.com/advisories/31499

Source: secalert@redhat.com

http://secunia.com/advisories/32316

Source: secalert@redhat.com

http://secunia.com/advisories/32792

Source: secalert@redhat.com

http://securitytracker.com/id?1020683

Source: secalert@redhat.com

http://www.mandriva.com/security/advisories?name=MDVSA-2008:169

Source: secalert@redhat.com

http://www.redhat.com/support/errata/RHSA-2008-0818.html

Source: secalert@redhat.com

http://www.securityfocus.com/bid/30683

Source: secalert@redhat.com

http://www.ubuntu.com/usn/USN-674-1

Source: secalert@redhat.com

http://www.ubuntu.com/usn/USN-674-2

Source: secalert@redhat.com

https://bugzilla.redhat.com/show_bug.cgi?id=457052

Source: secalert@redhat.com

Patch

https://exchange.xforce.ibmcloud.com/vulnerabilities/44440

Source: secalert@redhat.com

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10636

Source: secalert@redhat.com

http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00006.html