CVE ID:	CVE-2007-5208
Description:	hpssd in Hewlett-Packard Linux Imaging and Printing Project (hplip) 1.x and 2.x before 2.7.10 allows context-dependent attackers to execute arbitrary commands via shell metacharacters in a from address, which is not properly handled when invoking sendmail.
Test IDs:	1.3.6.1.4.1.25623.1.0.59035   1.3.6.1.4.1.25623.1.0.62182   1.3.6.1.4.1.25623.1.0.122653   1.3.6.1.4.1.25623.1.0.58705   1.3.6.1.4.1.25623.1.0.59615   1.3.6.1.4.1.25623.1.0.861076   1.3.6.1.4.1.25623.1.0.58960   1.3.6.1.4.1.25623.1.0.59816   1.3.6.1.4.1.25623.1.0.861450   1.3.6.1.4.1.25623.1.0.65962   1.3.6.1.4.1.25623.1.0.60177   1.3.6.1.4.1.25623.1.0.840038   1.3.6.1.4.1.25623.1.0.59218
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2007-5208 BugTraq ID: 26054 http://www.securityfocus.com/bid/26054 Debian Security Information: DSA-1462 (Google Search) http://www.debian.org/security/2008/dsa-1462 https://www.redhat.com/archives/fedora-package-announce/2007-October/msg00200.html http://security.gentoo.org/glsa/glsa-200710-26.xml http://www.mandriva.com/en/security/advisories?name=MDKSA-2007:201 https://launchpad.net/bugs/149121 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10692 RedHat Security Advisories: RHSA-2007:0960 http://www.redhat.com/support/errata/RHSA-2007-0960.html http://www.securitytracker.com/id?1018806 http://secunia.com/advisories/27202 http://secunia.com/advisories/27221 http://secunia.com/advisories/27224 http://secunia.com/advisories/27232 http://secunia.com/advisories/27271 http://secunia.com/advisories/27332 http://secunia.com/advisories/27397 http://secunia.com/advisories/28453 SuSE Security Announcement: SUSE-SR:2007:021 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2007-10/msg00006.html https://usn.ubuntu.com/530-1/ http://www.vupen.com/english/advisories/2007/3479 XForce ISS Database: hplip-hpssd-command-execution(37183) https://exchange.xforce.ibmcloud.com/vulnerabilities/37183