CVE-2004-0801 Command injection in n/a
Local users or remote attackers with CUPS access can execute arbitrary commands via the foomatic-rip utility.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2004-0801?
CVE-2004-0801 is a high-severity command injection vulnerability in Conectiva Linux, published on 24 Sep 2004. Any signed-in user can exploit it over the network, with no action from the victim.
Official description
Unknown vulnerability in foomatic-rip in Foomatic before 3.0.2 allows local users or remote attackers with access to CUPS to execute arbitrary commands.
Which versions are affected by CVE-2004-0801?
It affects 4 products.
Products include Conectiva Linux, Linuxprinting.org Foomatic-Filters, Sun Java Desktop System, Trustix Secure Linux.
How do I fix CVE-2004-0801?
Upgrade to a fixed version.
Upgrade, and pass arguments to programs as a list instead of through a shell. More about Command injection.
Is CVE-2004-0801 being exploited?
There is no known exploitation of CVE-2004-0801 in the wild and no public exploit code.
Other vulnerabilities in Conectiva Linux
Sources
Also known as DEBIAN-CVE-2004-0801, GHSA-qp7f-3c43-g3jh.