pysmb.py in system-config-printer 0.6.x and 0.7.x, as used in foomatic-gui and possibly other products, allows remote SMB servers to execute arbitrary commands via shell metacharacters in the (1) NetBIOS or (2) workgroup name, which are not properly handled when searching for network printers.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade system-config-printerUpgrade system-config-printer-libsUpgrade system-config-printer-gui | Dec 1, 2016 | Aug 31, 2011 |
| Oracle_linux | — | Upgrade system-config-printer-libsUpgrade system-config-printer | Oct 16, 2024 | Aug 31, 2011 |
| Suse | — | Upgrade system-config-printer-appletUpgrade system-config-printer-common-langUpgrade system-config-printerUpgrade system-config-printer-langUpgrade python-cupshelpersUpgrade system-config-printer-debugsourceUpgrade udev-configure-printer-debuginfoUpgrade udev-configure-printerUpgrade system-config-printer-commonUpgrade system-config-printer-dbus-service | Dec 12, 2013 | Aug 31, 2011 |
| Ubuntu | — | Upgrade foomatic-gui | Nov 19, 2024 | Aug 31, 2011 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub