Upstream information

CVE-2007-5208 at MITRE

Description

hpssd in Hewlett-Packard Linux Imaging and Printing Project (hplip) 1.x and 2.x before 2.7.10 allows context-dependent attackers to execute arbitrary commands via shell metacharacters in a from address, which is not properly handled when invoking sendmail.

SUSE information

Overall state of this security issue: Resolved

This issue is currently rated as having important severity.

CVSS v2 Scores
  National Vulnerability Database
Base Score 7.6
Vector AV:N/AC:H/Au:N/C:C/I:C/A:C
Access Vector Network
Access Complexity High
Authentication None
Confidentiality Impact Complete
Integrity Impact Complete
Availability Impact Complete
SUSE Bugzilla entry: 331015 [RESOLVED / FIXED]

SUSE Security Advisories:

List of released packages

Product(s) Fixed package version(s) References
SUSE Linux Enterprise Server 11 SP1
  • hplip >= 3.9.8-3.4.30
  • hplip-hpijs >= 3.9.8-3.4.30
 Patchnames:
SUSE Linux Enterprise Server 11 SP1 GA hplip-3.9.8-3.4.30
SUSE Linux Enterprise Server 11 SP2
  • hplip >= 3.11.10-0.6.7.1
  • hplip-hpijs >= 3.11.10-0.6.7.1
 Patchnames:
SUSE Linux Enterprise Server 11 SP2 GA hplip-3.11.10-0.6.7.1
SUSE Linux Enterprise Server 11 SP3
  • hplip >= 3.11.10-0.6.7.1
  • hplip-hpijs >= 3.11.10-0.6.7.1
 Patchnames:
SUSE Linux Enterprise Server 11 SP3 GA hplip-3.11.10-0.6.7.1
SUSE Linux Enterprise Server 11 SP4
  • hplip >= 3.11.10-0.6.11.1
  • hplip-hpijs >= 3.11.10-0.6.11.1
 Patchnames:
SUSE Linux Enterprise Server 11 SP4 GA hplip-3.11.10-0.6.11.1
openSUSE Tumbleweed
  • hplip >= 3.21.6-1.2
  • hplip-devel >= 3.21.6-1.2
  • hplip-hpijs >= 3.21.6-1.2
  • hplip-sane >= 3.21.6-1.2
  • hplip-scan-utils >= 3.21.6-1.2
 Patchnames:
openSUSE-Tumbleweed-2024-10847

SUSE Timeline for this CVE

CVE page created: Tue Jul 9 16:12:20 2013
CVE page last modified: Sat Jun 15 20:50:36 2024