foomatic-gui python-foomatic 'pysmb.py' Remote Arbitrary Shell Command Execution Vulnerability

Bugtraq ID:	48982
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Aug 03 2011 12:00AM
Updated:	Aug 03 2011 12:00AM
Credit:	daveb
Vulnerable:	foomatic-gui foomatic-gui 0.7.9.4
Not Vulnerable:	foomatic-gui foomatic-gui 0.7.9.5

foomatic-gui python-foomatic 'pysmb.py' Remote Arbitrary Shell Command Execution Vulnerability

foomatic-gui is prone to a remote arbitrary shell-command-execution vulnerability because the application fails to properly sanitize user-supplied input.

An attacker can exploit this issue to execute arbitrary shell commands in the context of the application.

Versions prior to foomatic-gui 0.7.9.5 are vulnerable.

foomatic-gui python-foomatic 'pysmb.py' Remote Arbitrary Shell Command Execution Vulnerability

The following sample input is available:

netbios name = oh'notquotezSIF to /etc/samba/smb.conf

foomatic-gui python-foomatic 'pysmb.py' Remote Arbitrary Shell Command Execution Vulnerability

Solution:
Updates are available. Please see the references for more information.

foomatic-gui python-foomatic 'pysmb.py' Remote Arbitrary Shell Command Execution Vulnerability

References:

• Debian Changelog foomatic-gui (0.7.9.5) (foomatic-gui)
  
• Foomatic-GUI Homepage (Foomatic-GUI)
  
• python-foomatic (Debian)
  
• python-foomatic command injection (daveb)
  
• Savannah CVS Surfing - project foomatic-gui - Diff of /foomatic-gui/foomatic/pys (foomatic-gui)