pysmb.py in system-config-printer 0.6.x and 0.7.x, as used in foomatic-gui and possibly other products, allows remote SMB servers to execute arbitrary commands via shell metacharacters in the (1) NetBIOS or (2) workgroup name, which are not properly handled when searching for network printers.
CVSS Details
- CVSS 3.1 Base Score: 5.6
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade system-config-printerUpgrade system-config-printer-guiUpgrade system-config-printer-libs | Dec 1, 2016 | Aug 31, 2011 |
| Oracle_linux | — | Upgrade system-config-printerUpgrade system-config-printer-libs | Oct 16, 2024 | Aug 31, 2011 |
| Suse | — | Upgrade udev-configure-printerUpgrade system-config-printer-dbus-serviceUpgrade system-config-printer-commonUpgrade udev-configure-printer-debuginfoUpgrade system-config-printer-debugsourceUpgrade system-config-printer-common-langUpgrade system-config-printerUpgrade python-cupshelpersUpgrade system-config-printer-appletUpgrade system-config-printer-lang | Dec 12, 2013 | Aug 31, 2011 |
| Ubuntu | — | Upgrade foomatic-gui | Nov 19, 2024 | Aug 31, 2011 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub