Detections
Analytics

RHEL 6 : foomatic (RHSA-2011:1110)

medium Nessus Plugin ID 55756

Language:

Synopsis

The remote Red Hat host is missing one or more security updates.

Description

An updated foomatic package that fixes one security issue is now available for Red Hat Enterprise Linux 6.

The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available from the CVE link in the References section.

Foomatic is a comprehensive, spooler-independent database of printers, printer drivers, and driver descriptions. The package also includes spooler-independent command line interfaces to manipulate queues and to print files and manipulate print jobs. foomatic-rip is a print filter written in C.

An input sanitization flaw was found in the foomatic-rip print filter.
An attacker could submit a print job with the username, title, or job options set to appear as a command line option that caused the filter to use a specified PostScript printer description (PPD) file, rather than the administrator-set one. This could lead to arbitrary code execution with the privileges of the 'lp' user. (CVE-2011-2964)

All foomatic users should upgrade to this updated package, which contains a backported patch to resolve this issue.

Solution

Update the affected foomatic and / or foomatic-debuginfo packages.

See Also

https://access.redhat.com/security/cve/cve-2011-2964

https://access.redhat.com/errata/RHSA-2011:1110

Plugin Details

Severity: Medium

ID: 55756

File Name: redhat-RHSA-2011-1110.nasl

Version: 1.15

Type: local

Agent: unix

Published: 8/2/2011

Updated: 1/14/2021

Supported Sensors: Agentless Assessment, Frictionless Assessment Agent, Frictionless Assessment AWS, Frictionless Assessment Azure, Nessus Agent, Nessus

Risk Information

VPR

Risk Factor: Medium

Score: 6.7

CVSS v2

Risk Factor: Medium

Base Score: 6.8

Vector: CVSS2#AV:N/AC:M/Au:N/C:P/I:P/A:P

Vulnerability Information

CPE: p-cpe:/a:redhat:enterprise_linux:foomatic, p-cpe:/a:redhat:enterprise_linux:foomatic-debuginfo, cpe:/o:redhat:enterprise_linux:6, cpe:/o:redhat:enterprise_linux:6.1

Required KB Items: Host/local_checks_enabled, Host/RedHat/release, Host/RedHat/rpm-list, Host/cpu

Patch Publication Date: 8/1/2011

Vulnerability Publication Date: 7/29/2011

Reference Information

CVE: CVE-2011-2964

RHSA: 2011:1110