Foomatic filters vulnerabilities

2011-08-2200:00:00

ubuntu.com

7 High

AI Score

Confidence

Low

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.065 Low

EPSS

Percentile

93.7%

JSON

Releases

Ubuntu 11.04
Ubuntu 10.10
Ubuntu 10.04
Ubuntu 8.04

Packages

foomatic-filters - OpenPrinting printer support - filters

Details

It was discovered that the foomatic-rip Foomatic filter incorrectly
handled command-line options. An attacker could use this flaw to cause
Foomatic to execute arbitrary code as the “lp” user.

In the default installation, attackers would be isolated by the CUPS
AppArmor profile.

OSVersionArchitecturePackageVersionFilename
Ubuntu8.04noarchfoomatic-filters< 3.0.2-20071204-0ubuntu2.3UNKNOWN
Ubuntu11.04noarchfoomatic-filters< 4.0.7-0ubuntu1.1UNKNOWN
Ubuntu10.10noarchfoomatic-filters< 4.0.5-0ubuntu3.1UNKNOWN
Ubuntu10.04noarchfoomatic-filters< 4.0.4-0ubuntu1.1UNKNOWN

OS	Version	Architecture	Package	Version	Filename
Ubuntu	8.04	noarch	foomatic-filters	< 3.0.2-20071204-0ubuntu2.3	UNKNOWN
Ubuntu	11.04	noarch	foomatic-filters	< 4.0.7-0ubuntu1.1	UNKNOWN
Ubuntu	10.10	noarch	foomatic-filters	< 4.0.5-0ubuntu3.1	UNKNOWN
Ubuntu	10.04	noarch	foomatic-filters	< 4.0.4-0ubuntu1.1	UNKNOWN