Description
pysmb.py in system-config-printer 0.6.x and 0.7.x, as used in foomatic-gui and possibly other products, allows remote SMB servers to execute arbitrary commands via shell metacharacters in the (1) NetBIOS or (2) workgroup name, which are not properly handled when searching for network printers.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 5 | system-config-printer +1 | 0.7.32.10-1.el5_7.1 | RHSA-2011:1196 |
| RHEL 4 | system-config-printer +1 | 0.6.116.10-1.6.el4 | RHSA-2011:1196 |
Advisories 1
- RHSA-2011:1196 Red Hat Security Advisory: system-config-printer security update Red Hat Security Advisories (RHSA) · Jun 26, 2026
References
- 45744 third-party-advisory
- RHSA-2011:1196 vendor-advisory
- http://cvs.savannah.gnu.org/viewvc/foomatic-gui/foomatic/pysmb.py?root=foomatic-gui&r1=1.2&r2=1.3&view=patch
- 1025967 vdb-entry
- https://bugs.launchpad.net/ubuntu/+source/foomatic-gui/+bug/811119
- https://bugzilla.redhat.com/show_bug.cgi?id=728348