Security hole in hplip

	On my debian, the .hplip.conf file is created world
writable. This allows a user A to change B user's printing or
scanning commands, replacing them with arbitrary commands which will
run with B's rights.This file should be created in 600 mode.


-- 
Erwan


-------------------------------------------------------
This SF.Net email is sponsored by: IntelliVIEW -- Interactive Reporting
Tool for open source databases. Create drag-&-drop reports. Save time
by over 75%! Publish reports on the web. Export to DOC, XLS, RTF, etc.
Download a FREE copy at http://www.intelliview.com/go/osdn_nl