LinuxPrinting.org Foomatic-Filter命令执行漏洞

QQ空间 新浪微博 微信 QQ facebook twitter
漏洞ID 1201282 漏洞类型 输入验证
发布时间 2004-09-15 更新时间 2007-02-22
CVE编号 CVE-2004-0801 CNNVD-ID CNNVD-200409-039
漏洞平台 N/A CVSS评分 7.5
|漏洞来源
https://www.securityfocus.com/bid/11184
http://www.cnnvd.org.cn/web/xxk/ldxqById.tag?CNNVD=CNNVD-200409-039
|漏洞详情
Foomatic3.0.2之前版本中的foomatic-rip存在未知漏洞。本地用户或远程攻击者可以利用该漏洞通过访问CUPS来执行任意命令。
|受影响的产品
Trustix Secure Linux 2.1 Trustix Secure Linux 2.0 Trustix Secure Enterprise Linux 2.0 SuSE SUSE Linux Enterprise Server 8 + Linux kernel 2.4.21
|参考资料
resource:Patch
hyperlink:ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2005.12/SCOSA-2005.12.txt
resource:Vendor Advisory
hyperlink:http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000880
resource:
hyperlink:http://lists.suse.com/archive/suse-security-announce/2006-May/0007.html
resource:
hyperlink:http://sunsolve.sun.com/search/document.do?assetkey=1-66-201005-1
resource:
hyperlink:http://sunsolve.sun.com/search/document.do?assetkey=1-77-1000757.1-1
resource:Patch
hyperlink:http://www.novell.com/linux/security/advisories/2004_31_cups.html
resource:
hyperlink:http://www.securityfocus.com/bid/11184
resource:Patch
hyperlink:http://www.trustix.net/errata/2004/0047/
resource:
hyperlink:https://exchange.xforce.ibmcloud.com/vulnerabilities/17388