In yast2-printer up to and including version 4.0.2 the SMB printer settings don't escape characters in passwords properly. If a password with backticks or simliar characters is supplied this allows for executing code as root. This requires tricking root to enter such a password in yast.
References
Link | Resource |
---|---|
https://bugzilla.suse.com/show_bug.cgi?id=1114853 |
Configurations
History
07 Nov 2023, 02:56
Type | Values Removed | Values Added |
---|---|---|
References | () https://bugzilla.suse.com/show_bug.cgi?id=1114853 - |
Information
Published : 2019-03-15 20:29
Updated : 2024-02-28 17:08
NVD link : CVE-2018-20106
Mitre link : CVE-2018-20106
CVE.ORG link : CVE-2018-20106
JSON object : View
Products Affected
opensuse
- yast2-printer