NetSight
IP …
high7.5

CVE-2015-8327

Incomplete blacklist vulnerability in util.c in foomatic-rip in cups-filters 1.0.42 before 1.2.0 and in foomatic-filters in Foomatic 4.0.x allows remote attack…

Impact

Incomplete blacklist vulnerability in util.c in foomatic-rip in cups-filters 1.0.42 before 1.2.0 and in foomatic-filters in Foomatic 4.0.x allows remote attackers to execute arbitrary commands via ` (backtick) characters in a print job.

Affected products

VendorProductAffected versions
RedhatEnterprise Linux Desktop
Version 6.0
RedhatEnterprise Linux Hpc Node
Version 6.0
RedhatEnterprise Linux Server
Version 6.0
RedhatEnterprise Linux Server Eus
Version 6.7.z
RedhatEnterprise Linux Workstation
Version 6.0
LinuxfoundationFoomatic-Filters
Versions 4.0.0, 4.0.1, 4.0.2, 4.0.3, 4.0.4, 4.0.5
CanonicalUbuntu Linux
Versions 12.04, 14.04, 15.04, 15.10
LinuxfoundationCups-Filters
Versions 1.0.42, 1.0.43, 1.0.44, 1.0.45, 1.0.46, 1.0.47
DebianDebian Linux
Version 8.0

References