CVE-2018-20106: Improper Neutralization of Special Elements used in an OS Command

In yast2-printer up to and including version 4.0.2 the SMB printer settings don't escape characters in passwords properly. If a password with backticks or simliar characters is supplied this allows for executing code as root. This requires tricking root to enter such a password in yast...

PT-2019-9987

Name of the Vulnerable Software and Affected Versions yast2-printer versions prior to 4.0.3 Description The issue is related to the SMB printer settings in yast2-printer, where passwords are not properly escaped, allowing for code execution as root if a password with special characters, such as...