{"id":"CVE-2011-2899","aliases":["EUVD-2011-2872","GHSA-hrxj-q3gx-5g5q","RHSA-2011:1196"],"status":"published","title":"pysmb.py in system-config-printer 0.6.x and 0.7.x, as used in foomatic-gui and possibly other...","description":"pysmb.py in system-config-printer 0.6.x and 0.7.x, as used in foomatic-gui and possibly other products, allows remote SMB servers to execute arbitrary commands via shell metacharacters in the (1) NetBIOS or (2) workgroup name, which are not properly handled when searching for network printers.","severity":{"version":"2.0","score":5.1,"vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.01967,"percentile":0.80505,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-20"],"published":"2011-08-31T23:00:00Z","modified":"2026-06-26T10:16:43Z","fixes":[{"ecosystem":"Red Hat:enterprise_linux:4::as","package":"system-config-printer","fixed_in":["0:0.6.116.10-1.6.el4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:4::as","package":"system-config-printer-debuginfo","fixed_in":["0:0.6.116.10-1.6.el4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:4::as","package":"system-config-printer-gui","fixed_in":["0:0.6.116.10-1.6.el4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:4::desktop","package":"system-config-printer","fixed_in":["0:0.6.116.10-1.6.el4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:4::desktop","package":"system-config-printer-debuginfo","fixed_in":["0:0.6.116.10-1.6.el4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:4::desktop","package":"system-config-printer-gui","fixed_in":["0:0.6.116.10-1.6.el4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:4::es","package":"system-config-printer","fixed_in":["0:0.6.116.10-1.6.el4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:4::es","package":"system-config-printer-debuginfo","fixed_in":["0:0.6.116.10-1.6.el4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:4::es","package":"system-config-printer-gui","fixed_in":["0:0.6.116.10-1.6.el4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:4::ws","package":"system-config-printer","fixed_in":["0:0.6.116.10-1.6.el4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:4::ws","package":"system-config-printer-debuginfo","fixed_in":["0:0.6.116.10-1.6.el4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:4::ws","package":"system-config-printer-gui","fixed_in":["0:0.6.116.10-1.6.el4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:5::client","package":"system-config-printer","fixed_in":["0:0.7.32.10-1.el5_7.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:5::client","package":"system-config-printer-debuginfo","fixed_in":["0:0.7.32.10-1.el5_7.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:5::client","package":"system-config-printer-libs","fixed_in":["0:0.7.32.10-1.el5_7.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:5::server","package":"system-config-printer","fixed_in":["0:0.7.32.10-1.el5_7.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:5::server","package":"system-config-printer-debuginfo","fixed_in":["0:0.7.32.10-1.el5_7.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:5::server","package":"system-config-printer-libs","fixed_in":["0:0.7.32.10-1.el5_7.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::as","package":"system-config-printer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.6.116.10-1.6.el4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::as","package":"system-config-printer-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.6.116.10-1.6.el4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::as","package":"system-config-printer-gui","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.6.116.10-1.6.el4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::desktop","package":"system-config-printer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.6.116.10-1.6.el4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::desktop","package":"system-config-printer-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.6.116.10-1.6.el4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::desktop","package":"system-config-printer-gui","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.6.116.10-1.6.el4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::es","package":"system-config-printer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.6.116.10-1.6.el4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::es","package":"system-config-printer-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.6.116.10-1.6.el4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::es","package":"system-config-printer-gui","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.6.116.10-1.6.el4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::ws","package":"system-config-printer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.6.116.10-1.6.el4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::ws","package":"system-config-printer-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.6.116.10-1.6.el4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::ws","package":"system-config-printer-gui","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.6.116.10-1.6.el4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"system-config-printer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.7.32.10-1.el5_7.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"system-config-printer-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.7.32.10-1.el5_7.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"system-config-printer-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.7.32.10-1.el5_7.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"system-config-printer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.7.32.10-1.el5_7.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"system-config-printer-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.7.32.10-1.el5_7.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"system-config-printer-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.7.32.10-1.el5_7.1"}]}]}],"products":[{"vendor":"redhat","product":"system-config-printer"}],"references":[{"url":"http://secunia.com/advisories/45744","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2011-1196.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Vendor Advisory"]},{"url":"http://cvs.savannah.gnu.org/viewvc/foomatic-gui/foomatic/pysmb.py?root=foomatic-gui\u0026r1=1.2\u0026r2=1.3\u0026view=patch","tags":["x_refsource_MISC","x_transferred","Patch"]},{"url":"http://www.securitytracker.com/id?1025967","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred"]},{"url":"https://bugs.launchpad.net/ubuntu/+source/foomatic-gui/+bug/811119","tags":["x_refsource_MISC","x_transferred","Patch"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=728348","tags":["x_refsource_CONFIRM","x_transferred","Patch","report"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2011-2899","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-hrxj-q3gx-5g5q"},{"url":"https://access.redhat.com/errata/RHSA-2011:1196","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2011/rhsa-2011_1196.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2011-2899","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2011-2899","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2011-2899","description":"pysmb.py in system-config-printer 0.6.x and 0.7.x, as used in foomatic-gui and possibly other products, allows remote SMB servers to execute arbitrary commands via shell metacharacters in the (1) NetBIOS or (2) workgroup name, which are not properly handled when searching for network printers.","status":"published","published":"2011-08-31T23:00:00Z","modified":"2024-08-06T23:15:31.677Z","updated_at":"2026-11-02T14:35:36.603688Z"}],"euvd":[{"id":"EUVD-2011-2872","description":"pysmb.py in system-config-printer 0.6.x and 0.7.x, as used in foomatic-gui and possibly other products, allows remote SMB servers to execute arbitrary commands via shell metacharacters in the (1) NetBIOS or (2) workgroup name, which are not properly handled when searching for network printers.","status":"published","published":"2011-08-31T23:00:00Z","modified":"2024-08-06T23:15:31Z","updated_at":"2026-11-03T01:39:54.084102Z"}],"ghsa":[{"id":"GHSA-hrxj-q3gx-5g5q","title":"pysmb.py in system-config-printer 0.6.x and 0.7.x, as used in foomatic-gui and possibly other...","description":"pysmb.py in system-config-printer 0.6.x and 0.7.x, as used in foomatic-gui and possibly other products, allows remote SMB servers to execute arbitrary commands via shell metacharacters in the (1) NetBIOS or (2) workgroup name, which are not properly handled when searching for network printers.","status":"published","published":"2022-05-17T05:28:35Z","modified":"2023-01-28T05:04:17Z","cwes":["CWE-20"],"updated_at":"2026-11-02T14:44:08.629318Z"}],"nvd":[{"id":"CVE-2011-2899","description":"pysmb.py in system-config-printer 0.6.x and 0.7.x, as used in foomatic-gui and possibly other products, allows remote SMB servers to execute arbitrary commands via shell metacharacters in the (1) NetBIOS or (2) workgroup name, which are not properly handled when searching for network printers.","status":"published","published":"2011-08-31T23:55:03.457Z","modified":"2026-06-16T23:32:12.74Z","cvss":[{"version":"2.0","score":5.1,"vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-20"],"updated_at":"2026-11-02T14:02:09.988332Z"}],"osv":[{"id":"RHSA-2011:1196","title":"Red Hat Security Advisory: system-config-printer security update","status":"published","published":"2024-09-15T19:20:41Z","modified":"2026-06-26T10:16:43Z","updated_at":"2026-11-02T15:53:01.003286Z"}]}}