Lucene search
+L

1 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/03/15 12:00 a.m.•3 views

CVE-2018-20106: Improper Neutralization of Special Elements used in an OS Command

In yast2-printer up to and including version 4.0.2 the SMB printer settings don't escape characters in passwords properly. If a password with backticks or simliar characters is supplied this allows for executing code as root. This requires tricking root to enter such a password in yast...

9.3CVSS5.7AI score0.01023EPSS
SaveExploits0References3
Rows per page
Query Builder