CVE-2011-2899
pysmb.py in system-config-printer 0.6.x and 0.7.x, as used in foomatic-gui and possibly other...
CVE-2011-2899 is a medium vulnerability (CVSS 5.1) in Redhat System-config-printer, published August 31, 2011. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.97%, the 80th percentile. Fixed in system-config-printer 0:0.6.116.10-1.6.el4.
- Severity
- 5.1 MediumCVSS 2.0, NVD
- Exploit chance
- 1.97%EPSS, 80th percentile
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
0:0.6.116.10-1.6.el4system-config-printer +17 more
Description
pysmb.py in system-config-printer 0.6.x and 0.7.x, as used in foomatic-gui and possibly other products, allows remote SMB servers to execute arbitrary commands via shell metacharacters in the (1) NetBIOS or (2) workgroup name, which are not properly handled when searching for network printers.
Exploit likelihood
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
system-config-printerRed Hat:enterprise_linux:4::as | before 0:0.6.116.10-1.6.el4 | 0:0.6.116.10-1.6.el4 |
system-config-printer-debuginfoRed Hat:enterprise_linux:4::as | before 0:0.6.116.10-1.6.el4 | 0:0.6.116.10-1.6.el4 |
system-config-printer-guiRed Hat:enterprise_linux:4::as | before 0:0.6.116.10-1.6.el4 | 0:0.6.116.10-1.6.el4 |
system-config-printerRed Hat:enterprise_linux:4::desktop | before 0:0.6.116.10-1.6.el4 | 0:0.6.116.10-1.6.el4 |
system-config-printer-debuginfoRed Hat:enterprise_linux:4::desktop | before 0:0.6.116.10-1.6.el4 | 0:0.6.116.10-1.6.el4 |
system-config-printer-guiRed Hat:enterprise_linux:4::desktop | before 0:0.6.116.10-1.6.el4 | 0:0.6.116.10-1.6.el4 |
system-config-printerRed Hat:enterprise_linux:4::es | before 0:0.6.116.10-1.6.el4 | 0:0.6.116.10-1.6.el4 |
system-config-printer-debuginfoRed Hat:enterprise_linux:4::es | before 0:0.6.116.10-1.6.el4 | 0:0.6.116.10-1.6.el4 |
system-config-printer-guiRed Hat:enterprise_linux:4::es | before 0:0.6.116.10-1.6.el4 | 0:0.6.116.10-1.6.el4 |
system-config-printerRed Hat:enterprise_linux:4::ws | before 0:0.6.116.10-1.6.el4 | 0:0.6.116.10-1.6.el4 |
Show 8 moreShow less
| Package | Affected | Fixed |
|---|---|---|
system-config-printer-debuginfoRed Hat:enterprise_linux:4::ws | before 0:0.6.116.10-1.6.el4 | 0:0.6.116.10-1.6.el4 |
system-config-printer-guiRed Hat:enterprise_linux:4::ws | before 0:0.6.116.10-1.6.el4 | 0:0.6.116.10-1.6.el4 |
system-config-printerRed Hat:enterprise_linux:5::client | before 0:0.7.32.10-1.el5_7.1 | 0:0.7.32.10-1.el5_7.1 |
system-config-printer-debuginfoRed Hat:enterprise_linux:5::client | before 0:0.7.32.10-1.el5_7.1 | 0:0.7.32.10-1.el5_7.1 |
system-config-printer-libsRed Hat:enterprise_linux:5::client | before 0:0.7.32.10-1.el5_7.1 | 0:0.7.32.10-1.el5_7.1 |
system-config-printerRed Hat:enterprise_linux:5::server | before 0:0.7.32.10-1.el5_7.1 | 0:0.7.32.10-1.el5_7.1 |
system-config-printer-debuginfoRed Hat:enterprise_linux:5::server | before 0:0.7.32.10-1.el5_7.1 | 0:0.7.32.10-1.el5_7.1 |
system-config-printer-libsRed Hat:enterprise_linux:5::server | before 0:0.7.32.10-1.el5_7.1 | 0:0.7.32.10-1.el5_7.1 |
What each source reports
NVD Score used
pysmb.py in system-config-printer 0.6.x and 0.7.x, as used in foomatic-gui and possibly other products, allows remote SMB servers to execute arbitrary commands via shell metacharacters in the (1) NetBIOS or (2) workgroup name, which are not properly handled when searching for network printers.
- Record
CVE-2011-2899- CVSS 2.0
- 5.1 Medium
AV:N/AC:H/Au:N/C:P/I:P/A:P - Weakness
- CWE-20
- Updated
- 2026-11-02
CVE ListNo score
pysmb.py in system-config-printer 0.6.x and 0.7.x, as used in foomatic-gui and possibly other products, allows remote SMB servers to execute arbitrary commands via shell metacharacters in the (1) NetBIOS or (2) workgroup name, which are not properly handled when searching for network printers.
- Record
CVE-2011-2899- Updated
- 2026-11-02
EUVDEUVD-2011-2872No score
pysmb.py in system-config-printer 0.6.x and 0.7.x, as used in foomatic-gui and possibly other products, allows remote SMB servers to execute arbitrary commands via shell metacharacters in the (1) NetBIOS or (2) workgroup name, which are not properly handled when searching for network printers.
- Record
EUVD-2011-2872- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-hrxj-q3gx-5g5qNo score
pysmb.py in system-config-printer 0.6.x and 0.7.x, as used in foomatic-gui and possibly other...
pysmb.py in system-config-printer 0.6.x and 0.7.x, as used in foomatic-gui and possibly other products, allows remote SMB servers to execute arbitrary commands via shell metacharacters in the (1) NetBIOS or (2) workgroup name, which are not properly handled when searching for network printers.
- Record
GHSA-hrxj-q3gx-5g5q- Weakness
- CWE-20
- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
References
secunia.com/advisories/45744
redhat.com/support/errata/RHSA-2011-1196.html
cvs.savannah.gnu.org/viewvc/foomatic-gui/foomatic/pysmb.py?root=foomatic-gui&r1=1.2&r2=1.3&view=patch
securitytracker.com/id?1025967
bugs.launchpad.net/ubuntu/+source/foomatic-gui/+bug/811119
bugzilla.redhat.com/show_bug.cgi?id=728348
Show 7 moreShow less
nvd.nist.gov/vuln/detail/CVE-2011-2899
github.com/advisories/GHSA-hrxj-q3gx-5g5q
access.redhat.com/errata/RHSA-2011:1196
security.access.redhat.com/data/csaf/v2/advisories/2011/rhsa-2011_1196.json
cve.org/CVERecord?id=CVE-2011-2899