pysmb.py in system-config-printer 0.6.x and 0.7.x, as used in foomatic-gui and possibly other products, allows remote SMB servers to execute arbitrary commands via shell metacharacters in the (1) NetBIOS or (2) workgroup name, which are not properly handled when searching for network printers.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade system-config-printer-libsUpgrade system-config-printer-guiUpgrade system-config-printer | Dec 1, 2016 | Aug 31, 2011 |
| Oracle_linux | — | Upgrade system-config-printerUpgrade system-config-printer-libs | Oct 16, 2024 | Aug 31, 2011 |
| Suse | — | Upgrade udev-configure-printer-debuginfoUpgrade system-config-printer-debugsourceUpgrade system-config-printer-commonUpgrade system-config-printer-dbus-serviceUpgrade udev-configure-printerUpgrade system-config-printer-langUpgrade system-config-printer-common-langUpgrade system-config-printer-appletUpgrade python-cupshelpersUpgrade system-config-printer | Dec 12, 2013 | Aug 31, 2011 |
| Ubuntu | — | Upgrade foomatic-gui | Nov 19, 2024 | Aug 31, 2011 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub