CVE-2011-2899

pysmb.py in system-config-printer 0.6.x and 0.7.x, as used in foomatic-gui and possibly other products, allows remote SMB servers to execute arbitrary commands via shell metacharacters in the (1) NetBIOS or (2) workgroup name, which are not properly handled when searching for network printers.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
5.1 UNKNOWN
NETWORK
HIGH
AV:N/AC:H/Au:N/C:P/I:P/A:P
redhatCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 67%
VendorProductVersion
redhatsystem-config-printer
0.7.32.6
redhatsystem-config-printer
0.7.32.7
redhatsystem-config-printer
0.7.32.8
redhatsystem-config-printer
0.7.32.9
redhatsystem-config-printer
0.7.32.10
redhatsystem-config-printer
0.7.60
redhatsystem-config-printer
0.7.61
redhatsystem-config-printer
0.7.62
redhatsystem-config-printer
0.7.63
redhatsystem-config-printer
0.7.63.1
redhatsystem-config-printer
0.7.63.2
redhatsystem-config-printer
0.7.63.3
redhatsystem-config-printer
0.7.63.4
redhatsystem-config-printer
0.7.64
redhatsystem-config-printer
0.7.65
redhatsystem-config-printer
0.7.66
redhatsystem-config-printer
0.7.67
redhatsystem-config-printer
0.7.68
redhatsystem-config-printer
0.7.69
redhatsystem-config-printer
0.7.70
redhatsystem-config-printer
0.7.71
redhatsystem-config-printer
0.7.72
redhatsystem-config-printer
0.7.73
redhatsystem-config-printer
0.7.74
redhatsystem-config-printer
0.7.74.1
redhatsystem-config-printer
0.7.74.2
redhatsystem-config-printer
0.7.74.3
redhatsystem-config-printer
0.7.74.4
redhatsystem-config-printer
0.7.74.5
redhatsystem-config-printer
0.7.74.6
redhatsystem-config-printer
0.7.74.7
redhatsystem-config-printer
0.7.74.8
redhatsystem-config-printer
0.7.74.9
redhatsystem-config-printer
0.7.74.10
redhatsystem-config-printer
0.7.74.11
redhatsystem-config-printer
0.7.74.12
redhatsystem-config-printer
0.7.74.13
redhatsystem-config-printer
0.7.75
redhatsystem-config-printer
0.7.76
redhatsystem-config-printer
0.7.77
redhatsystem-config-printer
0.7.78
redhatsystem-config-printer
0.7.79
redhatsystem-config-printer
0.7.80
redhatsystem-config-printer
0.7.81
redhatsystem-config-printer
0.7.82
redhatsystem-config-printer
0.7.82.1
redhatsystem-config-printer
0.7.82.2
redhatsystem-config-printer
0.7.82.3
redhatsystem-config-printer
0.7.82.4
redhatsystem-config-printer
0.7.82.5
redhatsystem-config-printer
0.6.0
redhatsystem-config-printer
0.6.1
redhatsystem-config-printer
0.6.2
redhatsystem-config-printer
0.6.3
redhatsystem-config-printer
0.6.4
redhatsystem-config-printer
0.6.5
redhatsystem-config-printer
0.6.6
redhatsystem-config-printer
0.6.7
redhatsystem-config-printer
0.6.8
redhatsystem-config-printer
0.6.9
redhatsystem-config-printer
0.6.10
redhatsystem-config-printer
0.6.11
redhatsystem-config-printer
0.6.12
redhatsystem-config-printer
0.6.13
redhatsystem-config-printer
0.6.14
redhatsystem-config-printer
0.6.15
redhatsystem-config-printer
0.6.16
redhatsystem-config-printer
0.6.17
redhatsystem-config-printer
0.6.18
redhatsystem-config-printer
0.6.19
redhatsystem-config-printer
0.6.20
redhatsystem-config-printer
0.6.21
redhatsystem-config-printer
0.6.22
redhatsystem-config-printer
0.6.23
redhatsystem-config-printer
0.6.24
redhatsystem-config-printer
0.6.25
redhatsystem-config-printer
0.6.26
redhatsystem-config-printer
0.6.27
redhatsystem-config-printer
0.6.28
redhatsystem-config-printer
0.6.29
redhatsystem-config-printer
0.6.30
redhatsystem-config-printer
0.6.31
redhatsystem-config-printer
0.6.32
redhatsystem-config-printer
0.6.33
redhatsystem-config-printer
0.6.34
redhatsystem-config-printer
0.6.35
redhatsystem-config-printer
0.6.36
redhatsystem-config-printer
0.6.37
redhatsystem-config-printer
0.6.38
redhatsystem-config-printer
0.6.39
redhatsystem-config-printer
0.6.40
redhatsystem-config-printer
0.6.41
redhatsystem-config-printer
0.6.42
redhatsystem-config-printer
0.6.43
redhatsystem-config-printer
0.6.44
redhatsystem-config-printer
0.6.45
redhatsystem-config-printer
0.6.46
redhatsystem-config-printer
0.6.47
redhatsystem-config-printer
0.6.48
redhatsystem-config-printer
0.6.49
redhatsystem-config-printer
0.6.50
redhatsystem-config-printer
0.6.51
redhatsystem-config-printer
0.6.52
redhatsystem-config-printer
0.6.53
redhatsystem-config-printer
0.6.54
redhatsystem-config-printer
0.6.55
redhatsystem-config-printer
0.6.56
redhatsystem-config-printer
0.6.57
redhatsystem-config-printer
0.6.58
redhatsystem-config-printer
0.6.59
redhatsystem-config-printer
0.6.60
redhatsystem-config-printer
0.6.61
redhatsystem-config-printer
0.6.62
redhatsystem-config-printer
0.6.63
redhatsystem-config-printer
0.6.64
redhatsystem-config-printer
0.6.65
redhatsystem-config-printer
0.6.66
redhatsystem-config-printer
0.6.67
redhatsystem-config-printer
0.6.68
redhatsystem-config-printer
0.6.69
redhatsystem-config-printer
0.6.70
redhatsystem-config-printer
0.6.71
redhatsystem-config-printer
0.6.72
redhatsystem-config-printer
0.6.73
redhatsystem-config-printer
0.6.74
redhatsystem-config-printer
0.6.75
redhatsystem-config-printer
0.6.76
redhatsystem-config-printer
0.6.77
redhatsystem-config-printer
0.6.78
redhatsystem-config-printer
0.6.79
redhatsystem-config-printer
0.6.80
redhatsystem-config-printer
0.6.81
redhatsystem-config-printer
0.6.82
redhatsystem-config-printer
0.6.83
redhatsystem-config-printer
0.6.84
redhatsystem-config-printer
0.6.85
redhatsystem-config-printer
0.6.86
redhatsystem-config-printer
0.6.87
redhatsystem-config-printer
0.6.88
redhatsystem-config-printer
0.6.89
redhatsystem-config-printer
0.6.90
redhatsystem-config-printer
0.6.91
redhatsystem-config-printer
0.6.92
redhatsystem-config-printer
0.6.93
redhatsystem-config-printer
0.6.94
redhatsystem-config-printer
0.6.95
redhatsystem-config-printer
0.6.96
redhatsystem-config-printer
0.6.97
redhatsystem-config-printer
0.6.98
redhatsystem-config-printer
0.6.99
redhatsystem-config-printer
0.6.100
redhatsystem-config-printer
0.6.101
redhatsystem-config-printer
0.6.102
redhatsystem-config-printer
0.6.103
redhatsystem-config-printer
0.6.104
redhatsystem-config-printer
0.6.105
redhatsystem-config-printer
0.6.106
redhatsystem-config-printer
0.6.107
redhatsystem-config-printer
0.6.108
redhatsystem-config-printer
0.6.109
redhatsystem-config-printer
0.6.110
redhatsystem-config-printer
0.6.111
redhatsystem-config-printer
0.6.112
redhatsystem-config-printer
0.6.113
redhatsystem-config-printer
0.6.114
redhatsystem-config-printer
0.6.115
redhatsystem-config-printer
0.6.116
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
system-config-printer
bullseye
1.5.14-1
fixed
squeeze
not-affected
lenny
no-dsa
bookworm
1.5.18-1
fixed
sid
1.5.18-3
fixed
trixie
1.5.18-3
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
foomatic-gui
saucy
dne
raring
Fixed 0.7.9.5
released
quantal
Fixed 0.7.9.5
released
precise
Fixed 0.7.9.5
released
oneiric
Fixed 0.7.9.5
released
natty
ignored
maverick
ignored
lucid
ignored
hardy
ignored
Common Weakness Enumeration
References
http://cvs.savannah.gnu.org/viewvc/foomatic-gui/foomatic/pysmb.py?root=foomatic-gui&r1=1.2&r2=1.3&view=patch
http://secunia.com/advisories/45744
http://www.redhat.com/support/errata/RHSA-2011-1196.html
http://www.securitytracker.com/id?1025967
https://bugs.launchpad.net/ubuntu/+source/foomatic-gui/+bug/811119
https://bugzilla.redhat.com/show_bug.cgi?id=728348
http://cvs.savannah.gnu.org/viewvc/foomatic-gui/foomatic/pysmb.py?root=foomatic-gui&r1=1.2&r2=1.3&view=patch
http://secunia.com/advisories/45744
http://www.redhat.com/support/errata/RHSA-2011-1196.html
http://www.securitytracker.com/id?1025967
https://bugs.launchpad.net/ubuntu/+source/foomatic-gui/+bug/811119
https://bugzilla.redhat.com/show_bug.cgi?id=728348