Cloudanix VulnDB

CVE-2007-5208

None

CVSS

—

EPSS

67.3%

Published

Oct 13, 2007

CISA due date

—

The record

hpssd in Hewlett-Packard Linux Imaging and Printing Project (hplip) 1.x and 2.x before 2.7.10 allows context-dependent attackers to execute arbitrary commands via shell metacharacters in a from address, which is not properly handled when invoking sendmail.

Affected packages

Ecosystem Package Introduced Fixed
Debian:10 hplip 0 1.6.10-4.3
Debian:11 hplip 0 1.6.10-4.3
Debian:12 hplip 0 1.6.10-4.3
Debian:13 hplip 0 1.6.10-4.3
Debian:4.0 hplip 0 1.6.10-3etch1
Debian:5.0 hplip 0 1.6.10-4.2+lenny1
Red Hat:enterprise_linux:5::client hpijs 0 1:1.6.7-4.1.el5_0.3
Red Hat:enterprise_linux:5::client hplip 0 0:1.6.7-4.1.el5_0.3
Red Hat:enterprise_linux:5::client hplip-debuginfo 0 0:1.6.7-4.1.el5_0.3
Red Hat:enterprise_linux:5::client libsane-hpaio 0 0:1.6.7-4.1.el5_0.3
Red Hat:enterprise_linux:5::server hpijs 0 1:1.6.7-4.1.el5_0.3
Red Hat:enterprise_linux:5::server hplip 0 0:1.6.7-4.1.el5_0.3
Red Hat:enterprise_linux:5::server hplip-debuginfo 0 0:1.6.7-4.1.el5_0.3
Red Hat:enterprise_linux:5::server libsane-hpaio 0 0:1.6.7-4.1.el5_0.3
openSUSE:Tumbleweed hplip 0 3.21.6-1.2

Related vulnerabilities