CVEvulnerability
CVE-2011-2899
5.1 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2011-08-31
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 5.1 MEDIUM — AV:N/AC:H/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-20
Description
pysmb.py in system-config-printer 0.6.x and 0.7.x, as used in foomatic-gui and possibly other products, allows remote SMB servers to execute arbitrary commands via shell metacharacters in the (1) NetBIOS or (2) workgroup name, which are not properly handled when searching for network printers.
Affected configurations
• redhat system-config-printer 0.7.32.6
• redhat system-config-printer 0.7.32.7
• redhat system-config-printer 0.7.32.8
• redhat system-config-printer 0.7.32.9
• redhat system-config-printer 0.7.32.10
• redhat system-config-printer 0.7.60
• redhat system-config-printer 0.7.61
• redhat system-config-printer 0.7.62
• redhat system-config-printer 0.7.63
• redhat system-config-printer 0.7.63.1
• redhat system-config-printer 0.7.63.2
• redhat system-config-printer 0.7.63.3
• redhat system-config-printer 0.7.63.4
• redhat system-config-printer 0.7.64
• redhat system-config-printer 0.7.65
• redhat system-config-printer 0.7.66
• redhat system-config-printer 0.7.67
• redhat system-config-printer 0.7.68
• redhat system-config-printer 0.7.69
• redhat system-config-printer 0.7.70
• redhat system-config-printer 0.7.71
• redhat system-config-printer 0.7.72
• redhat system-config-printer 0.7.73
• redhat system-config-printer 0.7.74
• redhat system-config-printer 0.7.74.1
• redhat system-config-printer 0.7.74.2
• redhat system-config-printer 0.7.74.3
• redhat system-config-printer 0.7.74.4
• redhat system-config-printer 0.7.74.5
• redhat system-config-printer 0.7.74.6
• redhat system-config-printer 0.7.74.7
• redhat system-config-printer 0.7.74.8
• redhat system-config-printer 0.7.74.9
• redhat system-config-printer 0.7.74.10
• redhat system-config-printer 0.7.74.11
• redhat system-config-printer 0.7.74.12
• redhat system-config-printer 0.7.74.13
• redhat system-config-printer 0.7.75
• redhat system-config-printer 0.7.76
• redhat system-config-printer 0.7.77
• redhat system-config-printer 0.7.78
• redhat system-config-printer 0.7.79
• redhat system-config-printer 0.7.80
• redhat system-config-printer 0.7.81
• redhat system-config-printer 0.7.82
• redhat system-config-printer 0.7.82.1
• redhat system-config-printer 0.7.82.2
• redhat system-config-printer 0.7.82.3
• redhat system-config-printer 0.7.82.4
• redhat system-config-printer 0.7.82.5
• redhat system-config-printer 0.6.0
• redhat system-config-printer 0.6.1
• redhat system-config-printer 0.6.2
• redhat system-config-printer 0.6.3
• redhat system-config-printer 0.6.4
• redhat system-config-printer 0.6.5
• redhat system-config-printer 0.6.6
• redhat system-config-printer 0.6.7
• redhat system-config-printer 0.6.8
• redhat system-config-printer 0.6.9
… and 107 more
Related
Weakness · CWE (1)
- CWE-20 Improper Input Validation weakness
References
- http://cvs.savannah.gnu.org/viewvc/foomatic-gui/foomatic/pysmb.py?root=foomatic-gui&r1=1.2&r2=1.3&view=patch Patch
- http://secunia.com/advisories/45744 Vendor Advisory
- http://www.redhat.com/support/errata/RHSA-2011-1196.html Vendor Advisory
- http://www.securitytracker.com/id?1025967 www.securitytracker.com
- https://bugs.launchpad.net/ubuntu/+source/foomatic-gui/+bug/811119 Patch
- https://bugzilla.redhat.com/show_bug.cgi?id=728348 Patch
- http://cvs.savannah.gnu.org/viewvc/foomatic-gui/foomatic/pysmb.py?root=foomatic-gui&r1=1.2&r2=1.3&view=patch Patch
- http://secunia.com/advisories/45744 Vendor Advisory
- http://www.redhat.com/support/errata/RHSA-2011-1196.html Vendor Advisory
- http://www.securitytracker.com/id?1025967 www.securitytracker.com
- https://bugs.launchpad.net/ubuntu/+source/foomatic-gui/+bug/811119 Patch
- https://bugzilla.redhat.com/show_bug.cgi?id=728348 Patch