A security issue has been reported in hplip, which can be exploited by malicious, local users to cause a DoS (Denial of Service).

The security issue is caused due to an error within hpssd.py when parsing certain requests. This can be exploited to crash the service by sending specially crafted requests to the default port 2207/TCP.

Note: Another problem within the alert-mailing feature, which can be abused to send alert emails via malicious requests, was also reported.

Solution
Update to version 2.8.4 or later.

Provided and/or discovered by
Reported by Red Hat.

Original Advisory
https://rhn.redhat.com/errata/RHSA-2008-0818.html

https://bugzilla.redhat.com/show_bug.cgi?id=455235
https://bugzilla.redhat.com/show_bug.cgi?id=457052

Deep Links
Links available to Secunia VIM customers