Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 386279 (CVE-2011-2899) - <net-print/foomatic-gui-0.7.9.5: remote code execution (CVE-2011-2899)
Summary: <net-print/foomatic-gui-0.7.9.5: remote code execution (CVE-2011-2899)
Status: RESOLVED FIXED
Alias: CVE-2011-2899
Product: Gentoo Security
Classification: Unclassified
Component: Vulnerabilities (show other bugs)
Hardware: All Linux
: Normal normal (vote)
Assignee: Gentoo Security
URL:
Whiteboard: ~1 [noglsa]
Keywords:
Depends on:
Blocks:
 
Reported: 2011-10-08 13:13 UTC by GLSAMaker/CVETool Bot
Modified: 2012-01-18 07:39 UTC (History)
2 users (show)

See Also:
Package list:
Runtime testing required: ---

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description GLSAMaker/CVETool Bot gentoo-dev 2011-10-08 13:13:32 UTC 
CVE-2011-2899 (http://nvd.nist.gov/nvd.cfm?cvename=CVE-2011-2899):
  pysmb.py in system-config-printer 0.6.x and 0.7.x, as used in foomatic-gui
  and possibly other products, allows remote SMB servers to execute arbitrary
  commands via shell metacharacters in the (1) NetBIOS or (2) workgroup name,
  which are not properly handled when searching for network printers.
Comment 1 Justin Lecher (RETIRED) gentoo-dev 2012-01-17 14:08:38 UTC 
Just commited the version Bump to 0.7.9.5. This contains the patch [1] to fix the issue mentioned [2].

1
http://cvs.savannah.gnu.org/viewvc/foomatic-gui/foomatic/pysmb.py?root=foomatic-gui&r1=1.2&r2=1.3&view=patch

2
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2011-2899
Comment 2 Tim Sammut (RETIRED) gentoo-dev 2012-01-18 07:38:14 UTC 
Thanks, Justin. Closing noglsa since I don't believe this package currently has stable versions. Please correct me if I am wrong.
Comment 3 Justin Lecher (RETIRED) gentoo-dev 2012-01-18 07:39:39 UTC 
You are right. All vulnerable versions have been removed.