Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2011-2899HistoryAug 31, 2011 - 11:55 p.m.
CVE-2011-2899
2011-08-3123:55:03
Debian Security Bug Tracker
security-tracker.debian.org
10
CVSS2
5.1
Attack Vector
NETWORK
Attack Complexity
HIGH
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:H/Au:N/C:P/I:P/A:P
EPSS
0.005
Percentile
77.1%
pysmb.py in system-config-printer 0.6.x and 0.7.x, as used in foomatic-gui and possibly other products, allows remote SMB servers to execute arbitrary commands via shell metacharacters in the (1) NetBIOS or (2) workgroup name, which are not properly handled when searching for network printers.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 12 | all | system-config-printer | < 1.5.18-1 | system-config-printer_1.5.18-1_all.deb |
| Debian | 11 | all | system-config-printer | < 1.5.14-1 | system-config-printer_1.5.14-1_all.deb |
| Debian | 999 | all | system-config-printer | < 1.5.18-3 | system-config-printer_1.5.18-3_all.deb |
| Debian | 13 | all | system-config-printer | < 1.5.18-3 | system-config-printer_1.5.18-3_all.deb |
Related
redhat
redhat
(RHSA-2011:1196) Moderate: system-config-printer security update
2011-08-23 00:00:00
nessus
nessus
Oracle Linux 4 / 5 : system-config-printer (ELSA-2011-1196)
2013-07-12 00:00:00
Scientific Linux Security Update : system-config-printer on SL4.x, SL5.x i386/x86_64
2012-08-01 00:00:00
CentOS 4 / 5 : system-config-printer (CESA-2011:1196)
2011-08-30 00:00:00
centos
centos
system security update
2011-08-29 10:20:22
openvas
openvas
CentOS Update for system-config-printer CESA-2011:1196 centos5 i386
2011-09-23 00:00:00
CentOS Update for system-config-printer CESA-2011:1196 centos4 x86_64
2012-07-30 00:00:00
CentOS Update for system-config-printer CESA-2011:1196 centos5 x86_64
2012-07-30 00:00:00
cve
cve
CVE-2011-2899
2011-08-31 23:55:03
oraclelinux
oraclelinux
system-config-printer security update
2011-08-23 00:00:00
prion
prion
Code injection
2011-08-31 23:55:00
cvelist
cvelist
CVE-2011-2899
2011-08-31 23:00:00
nvd
nvd
CVE-2011-2899
2011-08-31 23:55:03
ubuntucve
ubuntucve
CVE-2011-2899
2011-08-31 00:00:00
veracode
veracode
Arbitrary Code Execution
2020-04-10 01:03:56
CVSS2
5.1
Attack Vector
NETWORK
Attack Complexity
HIGH
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:H/Au:N/C:P/I:P/A:P
EPSS
0.005
Percentile
77.1%
Related for DEBIANCVE:CVE-2011-2899