[<prev] [next>] [thread-next>] [day] [month] [year] [list]
Message-ID: <1312377180.2576.3.camel@mdlinux>
Date: Wed, 03 Aug 2011 09:13:00 -0400
From: Marc Deslauriers <marc.deslauriers@...onical.com>
To: coley@...us.mitre.org
Cc: oss-security@...ts.openwall.com, security@...ntu.com
Subject: CVE Request: foomatic-gui
Hello,
foomatic-gui improperly escapes certain hostnames, resulting in a remote
arbitrary command execution vulnerability.
Ref.:
https://bugs.launchpad.net/ubuntu/+source/foomatic-gui/+bug/811119
http://cvs.savannah.gnu.org/viewvc/foomatic-gui/foomatic/pysmb.py?root=foomatic-gui&r1=1.2&r2=1.3
http://packages.debian.org/changelogs/pool/main/f/foomatic-gui/foomatic-gui_0.7.9.5/changelog
Could a CVE please be assigned to this issue?
Thanks,
Marc.
--
Marc Deslauriers
Ubuntu Security Engineer | http://www.ubuntu.com/
Canonical Ltd. | http://www.canonical.com/
Powered by blists - more mailing lists
Please check out the
Open Source Software Security Wiki, which is counterpart to this
mailing list.
Confused about mailing lists and their use?
Read about mailing lists on Wikipedia
and check out these
guidelines on proper formatting of your messages.
