[Forgot Password]
Login  Register Subscribe

30479

 
 

423868

 
 

248392

 
 

909

 
 

195452

 
 

282

Paid content will be excluded from the download.


Download | Alert*
OVAL

CESA-2011:1109 -- centos 4 x86_64 foomatic

ID: oval:org.secpod.oval:def:201616Date: (C)2012-01-31   (M)2021-06-02
Class: PATCHFamily: unix




Foomatic is a comprehensive, spooler-independent database of printers, printer drivers, and driver descriptions. The package also includes spooler-independent command line interfaces to manipulate queues and to print files and manipulate print jobs. foomatic-rip is a print filter written in Perl. An input sanitization flaw was found in the foomatic-rip print filter. An attacker could submit a print job with the username, title, or job options set to appear as a command line option that caused the filter to use a specified PostScript printer description file, rather than the administrator-set one. This could lead to arbitrary code execution with the privileges of the "lp" user. All foomatic users should upgrade to this updated package, which contains a backported patch to resolve this issue.

Platform:
CentOS 4
Product:
foomatic
Reference:
CESA-2011:1109
CVE-2011-2697
CVE    1
CVE-2011-2697
CPE    1
cpe:/o:centos:centos:4

© SecPod Technologies