Lucene search
+L

Gentoo Security Advisory GLSA 201203-07 (foomatic-filters)

🗓️ 12 Mar 2012 00:00:00Reported by Copyright (c) 2012 E-Soft Inc. http://www.securityspace.comType 
openvas
 openvas
🔗 plugins.openvas.org👁 26 Views

A vulnerability in foomatic-filters could result in the execution of arbitrary code. Users should upgrade to version 4.0.9

Related
Code
ReporterTitlePublishedViews
Family
attackerkb
ATTACKERKB
CVE-2011-2964
29 Jul 201120:55
attackerkb
bdu_fstec
BDU FSTEC
The vulnerability of the Red Hat Enterprise Linux operating system allows a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information.
28 Apr 201500:00
bdu_fstec
bdu_fstec
BDU FSTEC
The vulnerability of the Red Hat Enterprise Linux operating system allows a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information.
28 Apr 201500:00
bdu_fstec
bdu_fstec
BDU FSTEC
The vulnerability of the Red Hat Enterprise Linux operating system allows a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information.
28 Apr 201500:00
bdu_fstec
bdu_fstec
BDU FSTEC
The vulnerability of the CentOS operating system allows a malicious attacker to compromise the confidentiality, integrity, and accessibility of protected information.
28 Apr 201500:00
bdu_fstec
bdu_fstec
BDU FSTEC
Vulnerabilities of the Gentoo Linux operating system, which allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information
28 Apr 201500:00
bdu_fstec
nessus
Tenable Nessus
CentOS 4 / 5 : foomatic (CESA-2011:1109)
15 Aug 201100:00
nessus
nessus
Tenable Nessus
Debian DSA-2380-1 : foomatic-filters - shell command injection
12 Jan 201200:00
nessus
nessus
Tenable Nessus
Fedora 15 : foomatic-4.0.7-3.fc15 (2011-9554)
17 Aug 201100:00
nessus
nessus
Tenable Nessus
Fedora 14 : foomatic-4.0.7-2.fc14 (2011-9575)
17 Aug 201100:00
nessus
Rows per page
#
# OpenVAS Vulnerability Test
# $
# Description: Auto generated from Gentoo's XML based advisory
#
# Authors:
# Thomas Reinke <[email protected]>
#
# Copyright:
# Copyright (c) 2012 E-Soft Inc. http://www.securityspace.com
# Text descriptions are largely excerpted from the referenced
# advisories, and are Copyright (c) the respective author(s)
#
# This program is free software; you can redistribute it and/or modify
# it under the terms of the GNU General Public License version 2,
# or at your option, GNU General Public License version 3,
# as published by the Free Software Foundation
#
# This program is distributed in the hope that it will be useful,
# but WITHOUT ANY WARRANTY; without even the implied warranty of
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
# GNU General Public License for more details.
#
# You should have received a copy of the GNU General Public License
# along with this program; if not, write to the Free Software
# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.
#

include("revisions-lib.inc");
tag_insight = "A vulnerability in foomatic-filters could result in the execution
    of arbitrary code.";
tag_solution = "All foomatic-filters users should upgrade to the latest version:

      # emerge --sync
      # emerge --ask --oneshot --verbose '>=net-print/foomatic-filters-4.0.9'
    

http://www.securityspace.com/smysecure/catid.html?in=GLSA%20201203-07
http://bugs.gentoo.org/show_bug.cgi?id=379559";
tag_summary = "The remote host is missing updates announced in
advisory GLSA 201203-07.";

                                                                                
                                                                                
if(description)
{
 script_id(71191);
 script_tag(name:"cvss_base", value:"6.8");
 script_tag(name:"cvss_base_vector", value:"AV:N/AC:M/Au:N/C:P/I:P/A:P");
 script_cve_id("CVE-2011-2697", "CVE-2011-2964");
 script_version("$Revision: 6589 $");
 script_tag(name:"last_modification", value:"$Date: 2017-07-07 10:27:50 +0200 (Fri, 07 Jul 2017) $");
 script_tag(name:"creation_date", value:"2012-03-12 11:35:35 -0400 (Mon, 12 Mar 2012)");
 script_name("Gentoo Security Advisory GLSA 201203-07 (foomatic-filters)");



 script_category(ACT_GATHER_INFO);

 script_copyright("Copyright (c) 2012 E-Soft Inc. http://www.securityspace.com");
 script_family("Gentoo Local Security Checks");
 script_dependencies("gather-package-list.nasl");
 script_mandatory_keys("ssh/login/gentoo", "ssh/login/pkg");
 script_tag(name : "insight" , value : tag_insight);
 script_tag(name : "solution" , value : tag_solution);
 script_tag(name : "summary" , value : tag_summary);
 script_tag(name:"qod_type", value:"package");
 script_tag(name:"solution_type", value:"VendorFix");
 exit(0);
}

#
# The script code starts here
#

include("pkg-lib-gentoo.inc");
res = "";
report = "";
if((res = ispkgvuln(pkg:"net-print/foomatic-filters", unaffected: make_list("ge 4.0.9"), vulnerable: make_list("lt 4.0.9"))) != NULL ) {
    report += res;
}

if(report != "") {
    security_message(data:report);
} else if (__pkg_match) {
    exit(99); # Not vulnerable.
}

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

07 Jul 2017 00:00Current
0.6Low risk
Vulners AI Score0.6
EPSS0.10795
26