CVE-2015-2265

State: Published
Severity: Not scored
Published: Mar 24, 2015
Updated: Aug 6, 2024
Reserved: Mar 9, 2015

Description

The remove_bad_chars function in utils/cups-browsed.c in cups-filters before 1.0.66 allows remote IPP printers to execute arbitrary commands via consecutive shell metacharacters in the (1) model or (2) PDL. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-2707.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
n/an/a	n/aAffected

References

https://bugs.linuxfoundation.org/show_bug.cgi?id=1265
MDVSA-2015:196vendor-advisory
http://bzr.linuxfoundation.org/loggerhead/openprinting/cups-filters/revision/7333
USN-2532-1vendor-advisory
http://advisories.mageia.org/MGASA-2015-0132.html
openSUSE-SU-2015:1244vendor-advisory

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.