Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2015-8560

Опубликовано: 14 апр. 2016
Источник: nvd
CVSS3: 7.3
CVSS2: 7.5
EPSS Низкий

Описание

Incomplete blacklist vulnerability in util.c in foomatic-rip in cups-filters 1.0.42 before 1.4.0 and in foomatic-filters in Foomatic 4.0.x allows remote attackers to execute arbitrary commands via a ; (semicolon) character in a print job, a different vulnerability than CVE-2015-8327.

Комментарий

CWE-184: Incomplete Blacklist

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*
cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*
cpe:2.3:o:canonical:ubuntu_linux:15.04:*:*:*:*:*:*:*
cpe:2.3:o:canonical:ubuntu_linux:15.10:*:*:*:*:*:*:*
Конфигурация 2
cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*
Конфигурация 3

Одно из

cpe:2.3:a:linuxfoundation:cups-filters:1.0.42:*:*:*:*:*:*:*
cpe:2.3:a:linuxfoundation:cups-filters:1.0.43:*:*:*:*:*:*:*
cpe:2.3:a:linuxfoundation:cups-filters:1.0.44:*:*:*:*:*:*:*
cpe:2.3:a:linuxfoundation:cups-filters:1.0.45:*:*:*:*:*:*:*
cpe:2.3:a:linuxfoundation:cups-filters:1.0.46:*:*:*:*:*:*:*
cpe:2.3:a:linuxfoundation:cups-filters:1.0.47:*:*:*:*:*:*:*
cpe:2.3:a:linuxfoundation:cups-filters:1.0.48:*:*:*:*:*:*:*
cpe:2.3:a:linuxfoundation:cups-filters:1.0.49:*:*:*:*:*:*:*
cpe:2.3:a:linuxfoundation:cups-filters:1.0.50:*:*:*:*:*:*:*
cpe:2.3:a:linuxfoundation:cups-filters:1.0.51:*:*:*:*:*:*:*
cpe:2.3:a:linuxfoundation:cups-filters:1.0.52:*:*:*:*:*:*:*
cpe:2.3:a:linuxfoundation:cups-filters:1.0.53:*:*:*:*:*:*:*
cpe:2.3:a:linuxfoundation:cups-filters:1.0.54:*:*:*:*:*:*:*
cpe:2.3:a:linuxfoundation:cups-filters:1.0.55:*:*:*:*:*:*:*
cpe:2.3:a:linuxfoundation:cups-filters:1.0.56:*:*:*:*:*:*:*
cpe:2.3:a:linuxfoundation:cups-filters:1.0.57:*:*:*:*:*:*:*
cpe:2.3:a:linuxfoundation:cups-filters:1.0.58:*:*:*:*:*:*:*
cpe:2.3:a:linuxfoundation:cups-filters:1.0.59:*:*:*:*:*:*:*
cpe:2.3:a:linuxfoundation:cups-filters:1.0.60:*:*:*:*:*:*:*
cpe:2.3:a:linuxfoundation:cups-filters:1.0.61:*:*:*:*:*:*:*
cpe:2.3:a:linuxfoundation:cups-filters:1.0.62:*:*:*:*:*:*:*
cpe:2.3:a:linuxfoundation:cups-filters:1.0.63:*:*:*:*:*:*:*
cpe:2.3:a:linuxfoundation:cups-filters:1.0.64:*:*:*:*:*:*:*
cpe:2.3:a:linuxfoundation:cups-filters:1.0.65:*:*:*:*:*:*:*
cpe:2.3:a:linuxfoundation:cups-filters:1.0.66:*:*:*:*:*:*:*
cpe:2.3:a:linuxfoundation:cups-filters:1.0.67:*:*:*:*:*:*:*
cpe:2.3:a:linuxfoundation:cups-filters:1.0.68:*:*:*:*:*:*:*
cpe:2.3:a:linuxfoundation:cups-filters:1.0.69:*:*:*:*:*:*:*
cpe:2.3:a:linuxfoundation:cups-filters:1.0.70:*:*:*:*:*:*:*
cpe:2.3:a:linuxfoundation:cups-filters:1.0.71:*:*:*:*:*:*:*
cpe:2.3:a:linuxfoundation:cups-filters:1.0.72:*:*:*:*:*:*:*
cpe:2.3:a:linuxfoundation:cups-filters:1.0.73:*:*:*:*:*:*:*
cpe:2.3:a:linuxfoundation:cups-filters:1.0.74:*:*:*:*:*:*:*
cpe:2.3:a:linuxfoundation:cups-filters:1.0.75:*:*:*:*:*:*:*
cpe:2.3:a:linuxfoundation:cups-filters:1.0.76:*:*:*:*:*:*:*
cpe:2.3:a:linuxfoundation:cups-filters:1.1.0:*:*:*:*:*:*:*
cpe:2.3:a:linuxfoundation:cups-filters:1.2.0:*:*:*:*:*:*:*
cpe:2.3:a:linuxfoundation:cups-filters:1.3.0:*:*:*:*:*:*:*
Конфигурация 4

Одно из

cpe:2.3:a:linuxfoundation:foomatic-filters:4.0.0:*:*:*:*:*:*:*
cpe:2.3:a:linuxfoundation:foomatic-filters:4.0.1:*:*:*:*:*:*:*
cpe:2.3:a:linuxfoundation:foomatic-filters:4.0.2:*:*:*:*:*:*:*
cpe:2.3:a:linuxfoundation:foomatic-filters:4.0.3:*:*:*:*:*:*:*
cpe:2.3:a:linuxfoundation:foomatic-filters:4.0.4:*:*:*:*:*:*:*
cpe:2.3:a:linuxfoundation:foomatic-filters:4.0.5:*:*:*:*:*:*:*
cpe:2.3:a:linuxfoundation:foomatic-filters:4.0.6:*:*:*:*:*:*:*
cpe:2.3:a:linuxfoundation:foomatic-filters:4.0.7:*:*:*:*:*:*:*
cpe:2.3:a:linuxfoundation:foomatic-filters:4.0.8:*:*:*:*:*:*:*
cpe:2.3:a:linuxfoundation:foomatic-filters:4.0.9:*:*:*:*:*:*:*
cpe:2.3:a:linuxfoundation:foomatic-filters:4.0.10:*:*:*:*:*:*:*
cpe:2.3:a:linuxfoundation:foomatic-filters:4.0.11:*:*:*:*:*:*:*
cpe:2.3:a:linuxfoundation:foomatic-filters:4.0.12:*:*:*:*:*:*:*
cpe:2.3:a:linuxfoundation:foomatic-filters:4.0.13:*:*:*:*:*:*:*
cpe:2.3:a:linuxfoundation:foomatic-filters:4.0.14:*:*:*:*:*:*:*
cpe:2.3:a:linuxfoundation:foomatic-filters:4.0.15:*:*:*:*:*:*:*
cpe:2.3:a:linuxfoundation:foomatic-filters:4.0.16:*:*:*:*:*:*:*
cpe:2.3:a:linuxfoundation:foomatic-filters:4.0.17:*:*:*:*:*:*:*

EPSS

Процентиль: 92%
0.08557
Низкий

7.3 High

CVSS3

7.5 High

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

CVSS3: 7.3
ubuntu
больше 9 лет назад

Incomplete blacklist vulnerability in util.c in foomatic-rip in cups-filters 1.0.42 before 1.4.0 and in foomatic-filters in Foomatic 4.0.x allows remote attackers to execute arbitrary commands via a ; (semicolon) character in a print job, a different vulnerability than CVE-2015-8327.

redhat
больше 9 лет назад

Incomplete blacklist vulnerability in util.c in foomatic-rip in cups-filters 1.0.42 before 1.4.0 and in foomatic-filters in Foomatic 4.0.x allows remote attackers to execute arbitrary commands via a ; (semicolon) character in a print job, a different vulnerability than CVE-2015-8327.

CVSS3: 7.3
debian
больше 9 лет назад

Incomplete blacklist vulnerability in util.c in foomatic-rip in cups-f ...

CVSS3: 7.3
github
больше 3 лет назад

Incomplete blacklist vulnerability in util.c in foomatic-rip in cups-filters 1.0.42 before 1.4.0 and in foomatic-filters in Foomatic 4.0.x allows remote attackers to execute arbitrary commands via a ; (semicolon) character in a print job, a different vulnerability than CVE-2015-8327.

suse-cvrf
больше 9 лет назад

Security update for foomatic-filters

EPSS

Процентиль: 92%
0.08557
Низкий

7.3 High

CVSS3

7.5 High

CVSS2

Дефекты

NVD-CWE-Other
Уязвимость CVE-2015-8560