CVE-2011-4405
The cupshelpers scripts in system-config-printer in Ubuntu 11.04 and 11.10, as used by the...
The cupshelpers scripts in system-config-printer in Ubuntu 11.04 and 11.10, as used by the automatic printer driver download service, uses an "insecure connection" for queries to the OpenPrinting database, which allows remote attackers to execute arbitrary code via a man-in-the-middle (MITM) attack that modifies packages or repositories.
Exploit likelihood
What each source reports
NVD Score used
7.5
The cupshelpers scripts in system-config-printer in Ubuntu 11.04 and 11.10, as used by the automatic printer driver download service, uses an "insecure connection" for queries to the OpenPrinting database, which allows remote attackers to execute arbitrary code via a man-in-the-middle (MITM) attack that modifies packages or repositories.
- Record
CVE-2011-4405- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Weakness
- CWE-20
- Updated
- 2026-11-02
CVE List No score
The cupshelpers scripts in system-config-printer in Ubuntu 11.04 and 11.10, as used by the automatic printer driver download service, uses an "insecure connection" for queries to the OpenPrinting database, which allows remote attackers to execute arbitrary code via a man-in-the-middle (MITM) attack that modifies packages or repositories.
- Record
CVE-2011-4405- Updated
- 2026-11-02
EUVDEUVD-2011-4334 No score
The cupshelpers scripts in system-config-printer in Ubuntu 11.04 and 11.10, as used by the automatic printer driver download service, uses an "insecure connection" for queries to the OpenPrinting database, which allows remote attackers to execute arbitrary code via a man-in-the-middle (MITM) attack that modifies packages or repositories.
- Record
EUVD-2011-4334- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-hjc8-mc2g-pvm8 No score
The cupshelpers scripts in system-config-printer in Ubuntu 11.04 and 11.10, as used by the...
The cupshelpers scripts in system-config-printer in Ubuntu 11.04 and 11.10, as used by the automatic printer driver download service, uses an "insecure connection" for queries to the OpenPrinting database, which allows remote attackers to execute arbitrary code via a man-in-the-middle (MITM) attack that modifies packages or repositories.
- Record
GHSA-hjc8-mc2g-pvm8- Weakness
- CWE-20
- Updated
- 2026-11-02
OSV No score
The cupshelpers scripts in system-config-printer in Ubuntu 11.04 and 11.10, as used by the automatic printer driver download service, uses an "insecure connection" for queries to the OpenPrinting database, which allows remote attackers to execute arbitrary code via a man-in-the-middle (MITM) attack that modifies packages or repositories.
- Record
CVE-2011-4405- Updated
- 2026-11-02
OSVDEBIAN-CVE-2011-4405 No score
The cupshelpers scripts in system-config-printer in Ubuntu 11.04 and 11.10, as used by the automatic printer driver download service, uses an "insecure connection" for queries to the OpenPrinting database, which allows remote attackers to execute arbitrary code via a man-in-the-middle (MITM) attack that modifies packages or repositories.
- Record
DEBIAN-CVE-2011-4405- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10276-1 No score
python3-cupshelpers-1.5.7-9.3 on GA media
These are all security issues fixed in the python3-cupshelpers-1.5.7-9.3 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10276-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
system-config-printerDebian:12 |
before 1.3.7-1 | 1.3.7-1 |
system-config-printerDebian:13 |
before 1.3.7-1 | 1.3.7-1 |
system-config-printerDebian:14 |
before 1.3.7-1 | 1.3.7-1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2011-4405 is a high vulnerability (CVSS 7.5) in Canonical Ubuntu Linux, published November 29, 2011. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 3.45%, the 89th percentile. Fixed in system-config-printer 1.3.7-1.
References
secunia.com/advisories/46909
securityfocus.com/bid/50721
exchange.xforce.ibmcloud.com/vulnerabilities/71394
osvdb.org/77214
ubuntu.com/usn/USN-1265-1
nvd.nist.gov/vuln/detail/CVE-2011-4405
github.com/advisories/GHSA-hjc8-mc2g-pvm8
security-tracker.debian.org/tracker/CVE-2011-4405
suse.com/security/cve/CVE-2011-4405