Description
pysmb.py in system-config-printer 0.6.x and 0.7.x, as used in foomatic-gui and possibly other products, allows remote SMB servers to execute arbitrary commands via shell metacharacters in the (1) NetBIOS or (2) workgroup name, which are not properly handled when searching for network printers.
Analysis
No analysis available yet.
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||
|---|---|---|---|---|---|---|---|---|---|
| n/a | n/a | affected |
|
Configuration 1 [-]
|
Configuration 2 [-]
|
| Package | CPE | Advisory | Released Date |
|---|---|---|---|
| Red Hat Enterprise Linux 4 | |||
| system-config-printer-0:0.6.116.10-1.6.el4 | cpe:/o:redhat:enterprise_linux:4 | RHSA-2011:1196 | 2011-08-23T00:00:00Z |
| Red Hat Enterprise Linux 5 | |||
| system-config-printer-0:0.7.32.10-1.el5_7.1 | cpe:/o:redhat:enterprise_linux:5 | RHSA-2011:1196 | 2011-08-23T00:00:00Z |
No data available yet.
Remediation
No remediation available yet.
Tracking
Sign in to view the affected projects.
Advisories
| Source | ID | Title |
|---|---|---|
 EUVD |
EUVD-2011-2872 | pysmb.py in system-config-printer 0.6.x and 0.7.x, as used in foomatic-gui and possibly other products, allows remote SMB servers to execute arbitrary commands via shell metacharacters in the (1) NetBIOS or (2) workgroup name, which are not properly handled when searching for network printers. |
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: redhat
Published:
Updated: 2024-08-06T23:15:31.677Z
Reserved: 2011-07-27T00:00:00.000Z
Link: CVE-2011-2899
Vulnrichment
No data.
NVD
Status : Deferred
Published: 2011-08-31T23:55:03.457
Modified: 2025-04-11T00:51:21.963
Link: CVE-2011-2899
Redhat
OpenCVE Enrichment
No data.
Weaknesses