Secunia

Conectiva has issued an updated version of the ml85p printer driver. This fixes a vulnerability, which can be exploited by malicious, local users to escalate their privileges on a vulnerable system.

The vulnerability is caused due to insecure creation of temporary files, which potentially could be exploited via a symlink attack to create or overwrite arbitrary files with the privileges of the user "root".

However, successful exploitation requires that a user is a member of the "sys" group.

Solution
Updated packages:
Further details available in Customer Area

Deep Links
Links available in Customer Area