CVE catalog

CVE-2011-2899

system-config-printer: CVE-2011-2899

[CVE catalog]

Severity
Low
Published
Source
[NVD] · [CVE record]
EPSS
1.97% · Oct 25, 2026

pysmb.py in system-config-printer 0.6.x and 0.7.x, as used in foomatic-gui and possibly other products, allows remote SMB servers to execute arbitrary commands via shell metacharacters in the (1) NetBIOS or (2) workgroup name, which are not properly handled when searching for network printers.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debiansystem-config-printersid1.5.18-6not affected
Debiansystem-config-printerforky1.5.18-6not affected
Debiansystem-config-printertrixie1.5.18-4not affected
Debiansystem-config-printerbookworm1.5.18-1not affected

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debiansystem-config-printersourcesidNot affectedunimportantNot reportedNot reported
Debiansystem-config-printersourceforkyNot affectedunimportantNot reportedNot reported
Debiansystem-config-printersourcetrixieNot affectedunimportantNot reportedNot reported
Debiansystem-config-printersourcebookwormNot affectedunimportantNot reportedNot reported

OpenFactory catalog packages

[Debian 12 (Bookworm)]

  • [python3-cupshelpers]Not affected

    Source package: [system-config-printer]

    Details (2)
    • 1.5.18-1 · all · bookworm

      Not affected

      dsa · system-config-printer · debian · bookworm

    • 1.5.18-1 · all · bookworm

      Not affected

      dsa · system-config-printer · debian · bookworm

  • [system-config-printer]Not affected
    Details (2)
    • 1.5.18-1 · all · bookworm

      Not affected

      dsa · system-config-printer · debian · bookworm

    • 1.5.18-1 · all · bookworm

      Not affected

      dsa · system-config-printer · debian · bookworm

  • Source package: [system-config-printer]

    Details (2)
    • 1.5.18-1 · all · bookworm

      Not affected

      dsa · system-config-printer · debian · bookworm

    • 1.5.18-1 · all · bookworm

      Not affected

      dsa · system-config-printer · debian · bookworm

  • Source package: [system-config-printer]

    Details (2)
    • 1.5.18-1 · amd64 · bookworm

      Not affected

      dsa · system-config-printer · debian · bookworm

    • 1.5.18-1 · arm64 · bookworm

      Not affected

      dsa · system-config-printer · debian · bookworm

Observed:

References