PT-2019-9987 · Suse · Yast2-Printer

Dainius Masiliunas · Published 2019-03-15 · Updated 2019-10-09 · CVE-2018-20106

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions yast2-printer versions prior to 4.0.3

Description The issue is related to the SMB printer settings in yast2-printer, where passwords are not properly escaped, allowing for code execution as root if a password with special characters, such as backticks, is supplied. This requires tricking the root user into entering such a password in yast.

Recommendations For versions prior to 4.0.3, update to version 4.0.3 or later to resolve the issue. As a temporary workaround, consider avoiding the use of passwords with special characters, such as backticks, in the SMB printer settings until the issue is resolved.

Exploit

Fix

OS Command Injection

RCE

Weakness Enumeration

CWE-78

CWE-20

Related Identifiers

CVE-2018-20106

Affected Products

Yast2-Printer

References · 3

• 🔥 https://bugzilla.suse.com/show_bug.cgi?id=1114853 · Exploit
• https://osv.dev/vulnerability/CVE-2018-20106 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2018-20106 · Security Note