Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 386279 (CVE-2011-2899) - <net-print/foomatic-gui- remote code execution (CVE-2011-2899)
Summary: <net-print/foomatic-gui- remote code execution (CVE-2011-2899)
Alias: CVE-2011-2899
Product: Gentoo Security
Classification: Unclassified
Component: Vulnerabilities (show other bugs)
Hardware: All Linux
: Normal normal (vote)
Assignee: Gentoo Security
Whiteboard: ~1 [noglsa]
Depends on:
Reported: 2011-10-08 13:13 UTC by GLSAMaker/CVETool Bot
Modified: 2012-01-18 07:39 UTC (History)
2 users (show)

See Also:
Package list:
Runtime testing required: ---


Note You need to log in before you can comment on or make changes to this bug.
Description GLSAMaker/CVETool Bot gentoo-dev 2011-10-08 13:13:32 UTC
CVE-2011-2899 ( in system-config-printer 0.6.x and 0.7.x, as used in foomatic-gui
  and possibly other products, allows remote SMB servers to execute arbitrary
  commands via shell metacharacters in the (1) NetBIOS or (2) workgroup name,
  which are not properly handled when searching for network printers.
Comment 1 Justin Lecher (RETIRED) gentoo-dev 2012-01-17 14:08:38 UTC
Just commited the version Bump to This contains the patch [1] to fix the issue mentioned [2].


Comment 2 Tim Sammut (RETIRED) gentoo-dev 2012-01-18 07:38:14 UTC
Thanks, Justin. Closing noglsa since I don't believe this package currently has stable versions. Please correct me if I am wrong.
Comment 3 Justin Lecher (RETIRED) gentoo-dev 2012-01-18 07:39:39 UTC
You are right. All vulnerable versions have been removed.