CVE-2011-2899
redhat system-config-printer: no CVSS score yet. EPSS 2.0% chance of exploitation in the next 30 days.
pysmb.py in system-config-printer 0.6.x and 0.7.x, as used in foomatic-gui and possibly other products, allows remote SMB servers to execute arbitrary commands via shell metacharacters in the (1) NetBIOS or (2) workgroup name, which are not properly handled when searching for network printers.
- EPSS
- 2.0% chance of exploitation in the next 30 days; higher than 80% of CVEs (scores of 2026-10-31)
- CWE
- CWE-20
- Published
- Modified
- Record from
- the NVD, synced
Affected
- redhat:system-config-printer
References
- http://cvs.savannah.gnu.org/viewvc/foomatic-gui/foomatic/pysmb.py?root=foomatic-gui&r1=1.2&r2=1.3&view=patch
- http://secunia.com/advisories/45744
- http://www.redhat.com/support/errata/RHSA-2011-1196.html
- http://www.securitytracker.com/id?1025967
- https://bugs.launchpad.net/ubuntu/+source/foomatic-gui/+bug/811119