Vulnerability   
Search   
    Search 324607 CVE descriptions
and 145615 test descriptions,
access 10,000+ cross references.
Tests   CVE   All  

Test ID:1.3.6.1.4.1.25623.1.0.831440
Category:Mandrake Local Security Checks
Title:Mandriva Update for foomatic-filters MDVSA-2011:125 (foomatic-filters)
Summary:The remote host is missing an update for the 'foomatic-filters'; package(s) announced via the referenced advisory.
Description:Summary:
The remote host is missing an update for the 'foomatic-filters'
package(s) announced via the referenced advisory.

Vulnerability Insight:
A vulnerability has been discovered and corrected in foomatic-filters:

foomatic-rip allows remote attackers to execute arbitrary code via a
crafted *FoomaticRIPCommandLine field in a .ppd file (CVE-2011-2697,
CVE-2011-2964).

Packages for 2009.0 are provided as of the Extended Maintenance
Program. The updated packages have been patched to correct this issue.

Affected Software/OS:
foomatic-filters on Mandriva Linux 2009.0,
Mandriva Linux 2009.0/X86_64,
Mandriva Linux 2010.1,
Mandriva Linux 2010.1/X86_64,
Mandriva Enterprise Server 5,
Mandriva Enterprise Server 5/X86_64

Solution:
Please Install the Updated Packages.

CVSS Score:
6.8

CVSS Vector:
AV:N/AC:M/Au:N/C:P/I:P/A:P

Cross-Ref: Common Vulnerability Exposure (CVE) ID: CVE-2011-2697
GLSA-201203-07
http://security.gentoo.org/glsa/glsa-201203-07.xml
MDVSA-2011:125
http://www.mandriva.com/security/advisories?name=MDVSA-2011:125
USN-1194-1
http://www.ubuntu.com/usn/USN-1194-1
[oss-security] 20110713 CVE Request: hplip/foomatic-filters
http://www.openwall.com/lists/oss-security/2011/07/13/3
[oss-security] 20110718 Re: CVE Request: hplip/foomatic-filters
http://www.openwall.com/lists/oss-security/2011/07/18/3
[oss-security] 20110728 Re: CVE Request: hplip/foomatic-filters
http://www.openwall.com/lists/oss-security/2011/07/28/1
hplinuxprinting-foomaticriphplip-code-exec(68993)
https://exchange.xforce.ibmcloud.com/vulnerabilities/68993
http://www.xerox.com/download/security/security-bulletin/16287-4d6b7b0c81f7b/cert_XRX13-003_v1.0.pdf
https://bugzilla.novell.com/show_bug.cgi?id=698451
https://bugzilla.redhat.com/show_bug.cgi?id=721001
Common Vulnerability Exposure (CVE) ID: CVE-2011-2964
http://www.redhat.com/support/errata/RHSA-2011-1110.html
http://secunia.com/advisories/45477
XForce ISS Database: foomatic-foomatic-code-execution(68994)
https://exchange.xforce.ibmcloud.com/vulnerabilities/68994
CopyrightCopyright (C) 2011 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit.

To run a free test of this vulnerability against your system, register below.




© 1998-2025 E-Soft Inc. All rights reserved.