REDHAT-BUG-721001: Medium severity OpenPrinting foomatic-rip vulnerability
It was found that foomatic-rip universal print filter did not properly sanitize content of "files to be printed" command line argument, prior performing of the print job. A remote attacker could provide a specially-crafted PostScript Printer Description (PPD) file and trick the local user into printing it, which once performed could lead to arbitrary code execution with the privileges of the user running the foomatic-rip tool.
References: [1] https://bugzilla.novell.com/showbug.cgi?id=698451 [2] http://www.openwall.com/lists/oss-security/2011/07/13/3 (CVE Request)
Proposed patch against the foomatic-rip C-source code: [3] https://bugzilla.novell.com/showbug.cgi?id=698451#c24
Proposed patch against the foomatic-rip Perl script: [4] https://bugzilla.novell.com/showbug.cgi?id=698451#c25
Affected Software
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-721001?
The severity of REDHAT-BUG-721001 is considered high due to the potential for remote code execution.
How do I fix REDHAT-BUG-721001?
To fix REDHAT-BUG-721001, update to the latest version of OpenPrinting foomatic-rip that includes the security patches.
Who is affected by REDHAT-BUG-721001?
Any users of OpenPrinting foomatic-rip that process PostScript Printer Description (PPD) files are affected by REDHAT-BUG-721001.
Can REDHAT-BUG-721001 be exploited remotely?
Yes, REDHAT-BUG-721001 can be exploited remotely by an attacker who tricks a local user into printing a maliciously crafted PPD file.
What type of vulnerability is REDHAT-BUG-721001?
REDHAT-BUG-721001 is a command injection vulnerability related to the handling of printer commands in foomatic-rip.