CVE-2007-5208 Command injection in n/a

High 7.6 Published 13 Oct 2007 Updated 7 Aug 2024

Attackers can execute arbitrary commands on HP Linux Printing systems by injecting shell metacharacters into email from addresses processed by sendmail.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Over the internet
Victim action needed: Not needed
Fix: Available

What is CVE-2007-5208?

CVE-2007-5208 is a high-severity command injection vulnerability in n/a, published on 13 Oct 2007. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

hpssd in Hewlett-Packard Linux Imaging and Printing Project (hplip) 1.x and 2.x before 2.7.10 allows context-dependent attackers to execute arbitrary commands via shell metacharacters in a from address, which is not properly handled when invoking sendmail.

Weakness: CWE-20

Which versions are affected by CVE-2007-5208?

It affects 1 product.

Linux distribution packages (9)

`hpijs` Red Hat:enterprise_linux:5::client	All versions	`1:1.6.7-4.1.el5_0.3`
`hplip` Red Hat:enterprise_linux:5::client	All versions	`0:1.6.7-4.1.el5_0.3`
`hplip-debuginfo` Red Hat:enterprise_linux:5::client	All versions	`0:1.6.7-4.1.el5_0.3`
`libsane-hpaio` Red Hat:enterprise_linux:5::client	All versions	`0:1.6.7-4.1.el5_0.3`
`hpijs` Red Hat:enterprise_linux:5::server	All versions	`1:1.6.7-4.1.el5_0.3`
`hplip` Red Hat:enterprise_linux:5::server	All versions	`0:1.6.7-4.1.el5_0.3`
`hplip-debuginfo` Red Hat:enterprise_linux:5::server	All versions	`0:1.6.7-4.1.el5_0.3`
`libsane-hpaio` Red Hat:enterprise_linux:5::server	All versions	`0:1.6.7-4.1.el5_0.3`
`hplip` openSUSE:Tumbleweed	All versions	`3.21.6-1.2`

Products include Hp Linux Imaging and Printing Project.

How do I fix CVE-2007-5208?

Upgrade to a fixed version.

Upgrade, and pass arguments to programs as a list instead of through a shell. More about Command injection.

Is CVE-2007-5208 being exploited?

It is not confirmed as exploited in the wild, but public exploit code for CVE-2007-5208 exists.

Public exploit code: 1 Metasploit module and 1 Exploit-DB entry.

Sources

Also known as DEBIAN-CVE-2007-5208, DSA-1462-1, DTSA-72-1, GHSA-qjxj-rc6r-r77w, RHSA-2007:0960, openSUSE-SU-2024:10847-1.