PT-2011-1139 · Openprinting+1 · Foomatic+1

Published 2011-07-29 · Updated 2017-08-29 · CVE-2011-2964

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Foomatic versions prior to 4.0.9 Foomatic version 4.0.6 Foomatic version 4.0.4

Description The issue allows remote attackers to execute arbitrary code via a crafted *FoomaticRIPCommandLine field in a .ppd file. Exploitation of the vulnerabilities may lead to disruption of confidentiality, integrity, and availability of protected information. The exploitation can be carried out remotely.

Recommendations For Foomatic versions prior to 4.0.9, update to version 4.0.9 or later. For Foomatic version 4.0.6, update to version 4.0.9 or later. For Foomatic version 4.0.4, update to version 4.0.9 or later. As a temporary workaround, consider restricting access to the foomaticrip.c file and the *FoomaticRIPCommandLine field in .ppd files until a patch is available.

Exploit

Fix

RCE

Code Injection

Weakness Enumeration

CWE-94

CWE-20

Related Identifiers

BDU:2015-07199

BDU:2015-07200

BDU:2015-09438

CVE-2011-2964

DSA-2380-1

RHSA-2011:1110

RHSA-2011_1110

Affected Products

Foomatic

Red Hat

References · 23

• 🔥 http://openwall.com/lists/oss-security/2011/07/28/1 · Exploit
• 🔥 http://openwall.com/lists/oss-security/2011/07/18/3 · Exploit
• 🔥 https://bugzilla.novell.com/show_bug.cgi?id=698451 · Exploit
• 🔥 https://bugzilla.redhat.com/show_bug.cgi?id=721001 · Exploit
• 🔥 http://openwall.com/lists/oss-security/2011/07/13/3 · Exploit
• http://mandriva.com/security/advisories?name=MDVSA-2011:125 · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2011-1110.html · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-09438 · Security Note
• https://bdu.fstec.ru/vul/2015-07199 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2011-2964 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2011-2964 · Vendor Advisory
• http://redhat.com/support/errata/RHSA-2011-1110.html · Vendor Advisory
• http://security.gentoo.org/glsa/glsa-201203-07.xml · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2011-2964 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2011-2964 · Vendor Advisory