[USN-1265-1] system-config-printer vulnerability

========================================================================== Ubuntu Security Notice USN-1265-1 November 17, 2011 system-config-printer vulnerability ========================================================================== A security issue affects these releases of Ubuntu and its...

system-config-printer content spoofing

Unsafe conneciton is used to download drivers...

Ubuntu Update for system-config-printer USN-1265-1

Ubuntu Update for Linux kernel vulnerabilities USN-1265-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN12651.nasl 7964 2017-12-01 07:32:11Z santu $ Ubuntu Update for system-config-printer USN-1265-1 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH,...

Ubuntu 11.04 / 11.10 : system-config-printer vulnerability (USN-1265-1)

Marc Deslauriers discovered that system-config-printer's cupshelpers scripts used by the Ubuntu automatic printer driver download service queried the OpenPrinting database using an insecure connection. If a remote attacker were able to perform a man-in-the-middle attack, this flaw could be...

Ubuntu: Security Advisory (USN-1265-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-1265-1: system-config-printer vulnerability

Marc Deslauriers discovered that system-config-printer's cupshelpers scripts used by the Ubuntu automatic printer driver download service queried the OpenPrinting database using an insecure connection. If a remote attacker were able to perform a machine-in-the-middle attack, this flaw could be...

CVE-2011-4405

The cupshelpers scripts in system-config-printer in Ubuntu 11.04 and 11.10, as used by the automatic printer driver download service, uses an "insecure connection" for queries to the OpenPrinting database, which allows remote attackers to execute arbitrary code via a man-in-the-middle MITM attack...

Toshiba eStudio Printer Information Leakage

============================================================================ Foofus.net Security Advisory: foofus-20111026 ============================================================================ Title: Toshiba eStudio Multifunction Printer Information Leakage Version: e-Studio series devices...

Fedora Update for foomatic FEDORA-2011-11205

Check for the Version of foomatic OpenVAS Vulnerability Test Fedora Update for foomatic FEDORA-2011-11205 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

HP Easy Printer Care Software HPTicketMgr.dll Directory Traversal (CVE-2011-2404)

A code execution vulnerability has been reported in HP Easy Printer Care Software. The vulnerability is due to insufficient input validation by an ActiveX control within the affected product. A remote attacker may exploit this vulnerability by enticing an affected user to open a malicious link...

[SECURITY] Fedora 14 Update: foomatic-4.0.8-3.fc14

Foomatic is a comprehensive, spooler-independent database of printers, printer drivers, and driver descriptions. This package contains utilities to generate driver description files and printer queues for CUPS, LPD, LPRng, and PDQ using the database packaged separately. There is also the...

[SECURITY] Fedora 15 Update: foomatic-4.0.8-3.fc15

Foomatic is a comprehensive, spooler-independent database of printers, printer drivers, and driver descriptions. This package contains utilities to generate driver description files and printer queues for CUPS, LPD, LPRng, and PDQ using the database packaged separately. There is also the...

CentOS Update for system-config-printer CESA-2011:1196 centos5 i386

Check for the Version of system-config-printer OpenVAS Vulnerability Test CentOS Update for system-config-printer CESA-2011:1196 centos5 i386 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can...

CentOS Update for system-config-printer CESA-2011:1196 centos5 i386

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

[SECURITY] Fedora 15 Update: hplip-3.11.7-2.fc15

The Hewlett-Packard Linux Imaging and Printing Project provides drivers for HP printers and multi-function peripherals...

CVE-2011-2899

pysmb.py in system-config-printer 0.6.x and 0.7.x, as used in foomatic-gui and possibly other products, allows remote SMB servers to execute arbitrary commands via shell metacharacters in the 1 NetBIOS or 2 workgroup name, which are not properly handled when searching for network printers...

CVE-2011-2899

pysmb.py in system-config-printer 0.6.x and 0.7.x, as used in foomatic-gui and possibly other products, allows remote SMB servers to execute arbitrary commands via shell metacharacters in the 1 NetBIOS or 2 workgroup name, which are not properly handled when searching for network printers...

Code injection

pysmb.py in system-config-printer 0.6.x and 0.7.x, as used in foomatic-gui and possibly other products, allows remote SMB servers to execute arbitrary commands via shell metacharacters in the 1 NetBIOS or 2 workgroup name, which are not properly handled when searching for network printers...

CVE-2011-2899

CVE-2011-2899 affects pysmb.py in system-config-printer 0.6.x/0.7.x (used by foomatic-gui) and allows remote SMB servers to execute commands via shell metacharacters in NetBIOS or workgroup names when enumerating printers. Root cause: improper handling/quoting of shell meta characters. Exploitati...

CVE-2011-2899

pysmb.py in system-config-printer 0.6.x and 0.7.x, as used in foomatic-gui and possibly other products, allows remote SMB servers to execute arbitrary commands via shell metacharacters in the 1 NetBIOS or 2 workgroup name, which are not properly handled when searching for network printers...