[hpoj-devel] Security hole in hplip

[Erwan D. <er...@ra...>]

	On my debian, the .hplip.conf file is created world
writable. This allows a user A to change B user's printing or
scanning commands, replacing them with arbitrary commands which will
run with B's rights.This file should be created in 600 mode.


-- 
Erwan