pysmb.py in system-config-printer 0.6.x and 0.7.x, as used in foomatic-gui and possibly other products, allows remote SMB servers to execute arbitrary commands via shell metacharacters in the (1) NetBIOS or (2) workgroup name, which are not properly handled when searching for network printers.
History

No history.

cve-icon MITRE Information

Status: PUBLISHED

Assigner: redhat

Published: 2011-08-31T23:00:00Z

Updated: 2011-08-31T23:00:00Z

Reserved: 2011-07-27T00:00:00Z


Link: CVE-2011-2899

JSON object: View

cve-icon NVD Information

Status : Analyzed

Published: 2011-08-31T23:55:03.457

Modified: 2012-06-15T04:00:00.000


Link: CVE-2011-2899

JSON object: View

cve-icon Redhat Information

No data.

CWE