BDU:2016-00006

Уязвимость фильтра печати Foomatic и операционной системы Ubuntu, позволяющая нарушителю выполнить произвольные команды

Severity: HIGH (7.5)

References:

Published: 2015-12-17
Modified: 2024-11-21

CVE-2015-8327

Incomplete blacklist vulnerability in util.c in foomatic-rip in cups-filters 1.0.42 before 1.2.0 and in foomatic-filters in Foomatic 4.0.x allows remote attackers to execute arbitrary commands via ` (backtick) characters in a print job.

Severity: HIGH (7.5)

References:

Published: 2016-04-14
Modified: 2024-11-21

CVE-2015-8560

Incomplete blacklist vulnerability in util.c in foomatic-rip in cups-filters 1.0.42 before 1.4.0 and in foomatic-filters in Foomatic 4.0.x allows remote attackers to execute arbitrary commands via a ; (semicolon) character in a print job, a different vulnerability than CVE-2015-8327.

Severity: HIGH (7.3) Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

References:

Version: 2.1.0

Package cups-filters update in sisyphus on 2016-06-20

ALT-PU-2016-1627-1

Closed vulnerabilities

BDU:2016-00006

CVE-2015-8327

CVE-2015-8560