• info
• discussion
• exploit
• solution
• references

LinuxPrinting.org Foomatic-Filter Command Execution Vulnerability

Solution:
Please see the referenced vendor advisories for information on obtaining and applying fixes.


Sun Java Desktop System (JDS) 2003

• Sun patch-9321
  

Sun Java Desktop System (JDS) 2.0

• Sun patch-9321
  

LinuxPrinting.org Foomatic-Filters 3.0

• Conectiva foomatic-filters-3.0-27082U90_1cl.i386.rpm
  ftp://atualizacoes.conectiva.com.br/9/RPMS/foomatic-filters-3.0-27082U 90_1cl.i386.rpm


• Conectiva foomatic-filters-cupsomatic-20020309-28777U90_1cl.i386.rpm
  ftp://atualizacoes.conectiva.com.br/9/RPMS/foomatic-filters-cupsomatic -20020309-28777U90_1cl.i386.rpm


• RedHat foomatic-3.0.0-21.5.legacy.i386.rpm
  RedHat Fedora Core 1
  http://download.fedoralegacy.org/fedora/1/updates/i386/foomatic-3.0.0- 21.5.legacy.i386.rpm


• SuSE foomatic-filters-3.0.0-100.i586.patch.rpm
  ftp://ftp.suse.com/pub/suse/i386/update/9.0/rpm/i586/foomatic-filters- 3.0.0-100.i586.patch.rpm


• SuSE foomatic-filters-3.0.0-100.x86_64.patch.rpm
  ftp://ftp.suse.com/pub/suse/x86_64/update/9.0/rpm/x86_64/foomatic-filt ers-3.0.0-100.x86_64.patch.rpm


• SuSE foomatic-filters-3.0.0-100.i586.rpm
  ftp://ftp.suse.com/pub/suse/i386/update/9.0/rpm/i586/foomatic-filters- 3.0.0-100.i586.rpm


• SuSE foomatic-filters-3.0.0-100.x86_64.rpm
  ftp://ftp.suse.com/pub/suse/x86_64/update/9.0/rpm/x86_64/foomatic-filt ers-3.0.0-100.x86_64.rpm

LinuxPrinting.org Foomatic-Filters 3.0.1

• Conectiva foomatic-filters-3.0.1-54575U10_1cl.noarch.rpm
  ftp://atualizacoes.conectiva.com.br/10/RPMS/foomatic-filters-3.0.1-545 75U10_1cl.noarch.rpm


• Fedora foomatic-3.0.1-3.1.i386.rpm
  RedHat Fedora Core 2
  http://download.fedora.redhat.com/pub/fedora/linux/core/updates/2/


• Fedora foomatic-3.0.1-3.1.x86_64.rpm
  RedHat Fedora Core 2
  http://download.fedora.redhat.com/pub/fedora/linux/core/updates/2/


• Fedora foomatic-debuginfo-3.0.1-3.1.i386.rpm
  RedHat Fedora Core 2
  http://download.fedora.redhat.com/pub/fedora/linux/core/updates/2/


• Fedora foomatic-debuginfo-3.0.1-3.1.x86_64.rpm
  RedHat Fedora Core 2
  http://download.fedora.redhat.com/pub/fedora/linux/core/updates/2/


• Mandrake cups-drivers-1.1-116.1.92mdk.amd64.rpm
  Mandrake Linux 9.2/AMD64
  http://www.mandrakesecure.net/en/ftp.php


• Mandrake cups-drivers-1.1-116.1.92mdk.i586.rpm
  Mandrake Linux 9.2
  http://www.mandrakesecure.net/en/ftp.php


• Mandrake cups-drivers-1.1-138.2.100mdk.amd64.rpm
  Mandrake Linux 10.0/AMD64
  http://www.mandrakesecure.net/en/ftp.php


• Mandrake cups-drivers-1.1-138.2.100mdk.i586.rpm
  Mandrake Linux 10.0
  http://www.mandrakesecure.net/en/ftp.php


• Mandrake foomatic-db-3.0-1.20030908.3.1.92mdk.amd64.rpm
  Mandrake Linux 9.2/AMD64
  http://www.mandrakesecure.net/en/ftp.php


• Mandrake foomatic-db-3.0-1.20030908.3.1.92mdk.i586.rpm
  Mandrake Linux 9.2
  http://www.mandrakesecure.net/en/ftp.php


• Mandrake foomatic-db-3.0.1-0.20040828.1.1.100mdk.amd64.rpm
  Mandrake Linux 10.0/AMD64
  http://www.mandrakesecure.net/en/ftp.php


• Mandrake foomatic-db-3.0.1-0.20040828.1.1.100mdk.i586.rpm
  Mandrake Linux 10.0
  http://www.mandrakesecure.net/en/ftp.php


• Mandrake foomatic-db-engine-3.0-1.20030908.3.1.92mdk.amd64.rpm
  Mandrake Linux 9.2/AMD64
  http://www.mandrakesecure.net/en/ftp.php


• Mandrake foomatic-db-engine-3.0-1.20030908.3.1.92mdk.i586.rpm
  Mandrake Linux 9.2
  http://www.mandrakesecure.net/en/ftp.php


• Mandrake foomatic-db-engine-3.0.1-0.20040828.1.1.100mdk.amd64.rpm
  Mandrake Linux 10.0/AMD64
  http://www.mandrakesecure.net/en/ftp.php


• Mandrake foomatic-db-engine-3.0.1-0.20040828.1.1.100mdk.i586.rpm
  Mandrake Linux 10.0
  http://www.mandrakesecure.net/en/ftp.php


• Mandrake foomatic-filters-3.0-1.20030908.3.1.92mdk.amd64.rpm
  Mandrake Linux 9.2/AMD64
  http://www.mandrakesecure.net/en/ftp.php


• Mandrake foomatic-filters-3.0-1.20030908.3.1.92mdk.i586.rpm
  Mandrake Linux 9.2
  http://www.mandrakesecure.net/en/ftp.php


• Mandrake foomatic-filters-3.0.1-0.20040828.1.1.100mdk.amd64.rpm
  Mandrake Linux 10.0/AMD64
  http://www.mandrakesecure.net/en/ftp.php


• Mandrake foomatic-filters-3.0.1-0.20040828.1.1.100mdk.i586.rpm
  Mandrake Linux 10.0
  http://www.mandrakesecure.net/en/ftp.php


• Mandrake ghostscript-7.07-0.12.1.92mdk.amd64.rpm
  Mandrake Linux 9.2/AMD64
  http://www.mandrakesecure.net/en/ftp.php


• Mandrake ghostscript-7.07-0.12.1.92mdk.i586.rpm
  Mandrake Linux 9.2
  http://www.mandrakesecure.net/en/ftp.php


• Mandrake ghostscript-7.07-19.2.100mdk.amd64.rpm
  Mandrake Linux 10.0/AMD64
  http://www.mandrakesecure.net/en/ftp.php


• Mandrake ghostscript-7.07-19.2.100mdk.i586.rpm
  Mandrake Linux 10.0
  http://www.mandrakesecure.net/en/ftp.php


• Mandrake ghostscript-module-X-7.07-0.12.1.92mdk.amd64.rpm
  Mandrake Linux 9.2/AMD64
  http://www.mandrakesecure.net/en/ftp.php


• Mandrake ghostscript-module-X-7.07-0.12.1.92mdk.i586.rpm
  Mandrake Linux 9.2
  http://www.mandrakesecure.net/en/ftp.php


• Mandrake ghostscript-module-X-7.07-19.2.100mdk.amd64.rpm
  Mandrake Linux 10.0/AMD64
  http://www.mandrakesecure.net/en/ftp.php


• Mandrake ghostscript-module-X-7.07-19.2.100mdk.i586.rpm
  Mandrake Linux 10.0
  http://www.mandrakesecure.net/en/ftp.php


• Mandrake gimpprint-4.2.5-30.1.92mdk.amd64.rpm
  Mandrake Linux 9.2/AMD64
  http://www.mandrakesecure.net/en/ftp.php


• Mandrake gimpprint-4.2.5-30.1.92mdk.i586.rpm
  Mandrake Linux 9.2
  http://www.mandrakesecure.net/en/ftp.php


• Mandrake gimpprint-4.2.7-2.2.100mdk.amd64.rpm
  Mandrake Linux 10.0/AMD64
  http://www.mandrakesecure.net/en/ftp.php


• Mandrake gimpprint-4.2.7-2.2.100mdk.i586.rpm
  Mandrake Linux 10.0
  http://www.mandrakesecure.net/en/ftp.php


• Mandrake lib64gimpprint1-4.2.5-30.1.92mdk.amd64.rpm
  Mandrake Linux 9.2/AMD64
  http://www.mandrakesecure.net/en/ftp.php


• Mandrake lib64gimpprint1-4.2.7-2.2.100mdk.amd64.rpm
  Mandrake Linux 10.0/AMD64
  http://www.mandrakesecure.net/en/ftp.php


• Mandrake lib64gimpprint1-devel-4.2.5-30.1.92mdk.amd64.rpm
  Mandrake Linux 9.2/AMD64
  http://www.mandrakesecure.net/en/ftp.php


• Mandrake lib64gimpprint1-devel-4.2.7-2.2.100mdk.amd64.rpm
  Mandrake Linux 10.0/AMD64
  http://www.mandrakesecure.net/en/ftp.php


• Mandrake lib64ijs0-0.34-56.1.92mdk.amd64.rpm
  Mandrake Linux 9.2/AMD64
  http://www.mandrakesecure.net/en/ftp.php


• Mandrake lib64ijs0-0.34-76.2.100mdk.amd64.rpm
  Mandrake Linux 10.0/AMD64
  http://www.mandrakesecure.net/en/ftp.php


• Mandrake lib64ijs0-devel-0.34-56.1.92mdk.amd64.rpm
  Mandrake Linux 9.2/AMD64
  http://www.mandrakesecure.net/en/ftp.php


• Mandrake lib64ijs0-devel-0.34-76.2.100mdk.amd64.rpm
  Mandrake Linux 10.0/AMD64
  http://www.mandrakesecure.net/en/ftp.php


• Mandrake libgimpprint1-4.2.5-30.1.92mdk.i586.rpm
  Mandrake Linux 9.2
  http://www.mandrakesecure.net/en/ftp.php


• Mandrake libgimpprint1-4.2.7-2.2.100mdk.i586.rpm
  Mandrake Linux 10.0
  http://www.mandrakesecure.net/en/ftp.php


• Mandrake libgimpprint1-devel-4.2.5-30.1.92mdk.i586.rpm
  Mandrake Linux 9.2
  http://www.mandrakesecure.net/en/ftp.php


• Mandrake libgimpprint1-devel-4.2.7-2.2.100mdk.i586.rpm
  Mandrake Linux 10.0
  http://www.mandrakesecure.net/en/ftp.php


• Mandrake libijs0-0.34-56.1.92mdk.i586.rpm
  Mandrake Linux 9.2
  http://www.mandrakesecure.net/en/ftp.php


• Mandrake libijs0-0.34-76.2.100mdk.i586.rpm
  Mandrake Linux 10.0
  http://www.mandrakesecure.net/en/ftp.php


• Mandrake libijs0-devel-0.34-56.1.92mdk.i586.rpm
  Mandrake Linux 9.2
  http://www.mandrakesecure.net/en/ftp.php


• Mandrake libijs0-devel-0.34-76.2.100mdk.i586.rpm
  Mandrake Linux 10.0
  http://www.mandrakesecure.net/en/ftp.php


• Mandrake omni-0.7.2-32.1.92mdk.amd64.rpm
  Mandrake Linux 9.2/AMD64
  http://www.mandrakesecure.net/en/ftp.php


• Mandrake omni-0.7.2-32.1.92mdk.i586.rpm
  Mandrake Linux 9.2
  http://www.mandrakesecure.net/en/ftp.php


• Mandrake printer-filters-1.0-116.1.92mdk.amd64.rpm
  Mandrake Linux 9.2/AMD64
  http://www.mandrakesecure.net/en/ftp.php


• Mandrake printer-filters-1.0-116.1.92mdk.i586.rpm
  Mandrake Linux 9.2
  http://www.mandrakesecure.net/en/ftp.php


• Mandrake printer-filters-1.0-138.2.100mdk.amd64.rpm
  Mandrake Linux 10.0/AMD64
  http://www.mandrakesecure.net/en/ftp.php


• Mandrake printer-filters-1.0-138.2.100mdk.i586.rpm
  Mandrake Linux 10.0
  http://www.mandrakesecure.net/en/ftp.php


• Mandrake printer-testpages-1.0-116.1.92mdk.amd64.rpm
  Mandrake Linux 9.2/AMD64
  http://www.mandrakesecure.net/en/ftp.php


• Mandrake printer-testpages-1.0-116.1.92mdk.i586.rpm
  Mandrake Linux 9.2
  http://www.mandrakesecure.net/en/ftp.php


• Mandrake printer-testpages-1.0-138.2.100mdk.amd64.rpm
  Mandrake Linux 10.0/AMD64
  http://www.mandrakesecure.net/en/ftp.php


• Mandrake printer-testpages-1.0-138.2.100mdk.i586.rpm
  Mandrake Linux 10.0
  http://www.mandrakesecure.net/en/ftp.php


• Mandrake printer-utils-1.0-116.1.92mdk.amd64.rpm
  Mandrake Linux 9.2/AMD64
  http://www.mandrakesecure.net/en/ftp.php


• Mandrake printer-utils-1.0-116.1.92mdk.i586.rpm
  Mandrake Linux 9.2
  http://www.mandrakesecure.net/en/ftp.php


• Mandrake printer-utils-1.0-138.2.100mdk.amd64.rpm
  Mandrake Linux 10.0/AMD64
  http://www.mandrakesecure.net/en/ftp.php


• Mandrake printer-utils-1.0-138.2.100mdk.i586.rpm
  Mandrake Linux 10.0
  http://www.mandrakesecure.net/en/ftp.php


• SuSE foomatic-filters-3.0.1-41.6.i586.patch.rpm
  ftp://ftp.suse.com/pub/suse/i386/update/9.1/rpm/i586/foomatic-filters- 3.0.1-41.6.i586.patch.rpm


• SuSE foomatic-filters-3.0.1-41.6.x86_64.patch.rpm
  ftp://ftp.suse.com/pub/suse/x86_64/update/9.1/rpm/x86_64/foomatic-filt ers-3.0.1-41.6.x86_64.patch.rpm


• SuSE foomatic-filters-3.0.1-41.6.i586.rpm
  ftp://ftp.suse.com/pub/suse/i386/update/9.1/rpm/i586/cups-client-1.1.2 0-108.8.i586.patch.rpm


• SuSE foomatic-filters-3.0.1-41.6.x86_64.rpm
  ftp://ftp.suse.com/pub/suse/x86_64/update/9.1/rpm/x86_64/foomatic-filt ers-3.0.1-41.6.x86_64.rpm

LinuxPrinting.org Foomatic-Filters 3.0.2

• SuSE foomatic-filters-3.0.2-20.3.i586.rpm
  SUSE LINUX 10.1:
  ftp://ftp.suse.com/pub/suse/update/10.1/rpm/i586/foomatic-filters-3.0. 2-20.3.i586.rpm


• SuSE foomatic-filters-3.0.2-20.3.ppc.rpm
  SUSE LINUX 10.1:
  ftp://ftp.suse.com/pub/suse/update/10.1/rpm/ppc/foomatic-filters-3.0.2 -20.3.ppc.rpm


• SuSE foomatic-filters-3.0.2-20.3.x86_64.rpm
  SUSE LINUX 10.1:
  ftp://ftp.suse.com/pub/suse/update/10.1/rpm/x86_64/foomatic-filters-3. 0.2-20.3.x86_64.rpm


• SuSE foomatic-filters-3.0.2-3.2.i586.rpm
  SUSE LINUX 9.3:
  ftp://ftp.suse.com/pub/suse/i386/update/9.3/rpm/i586/foomatic-filters- 3.0.2-3.2.i586.rpm


• SuSE foomatic-filters-3.0.2-3.2.x86_64.rpm
  SUSE LINUX 9.3:
  ftp://ftp.suse.com/pub/suse/i386/update/9.3/rpm/x86_64/foomatic-filter s-3.0.2-3.2.x86_64.rpm


• SuSE foomatic-filters-3.0.2-4.2.i586.rpm
  SUSE LINUX 10.0:
  ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/i586/foomatic-filters -3.0.2-4.2.i586.rpm


• SuSE foomatic-filters-3.0.2-4.2.ppc.rpm
  SUSE LINUX 10.0:
  ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/ppc/foomatic-filters- 3.0.2-4.2.ppc.rpm


• SuSE foomatic-filters-3.0.2-4.2.x86_64.rpm
  SUSE LINUX 10.0:
  ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/x86_64/foomatic-filte rs-3.0.2-4.2.x86_64.rpm