返回 CVE 浏览器

CVE-2007-5208

HIGH

7.6

CVSS Severity Score

EPSS Score0.1500%

EPSS Percentile33.79th

Published2007年10月13日

Last Modified2026年4月23日

Vulnerability Description

hpssd in Hewlett-Packard Linux Imaging and Printing Project (hplip) 1.x and 2.x before 2.7.10 allows context-dependent attackers to execute arbitrary commands via shell metacharacters in a from address, which is not properly handled when invoking sendmail.

Affected Platforms (CPE)

📦

Hp

Linux Imaging And Printing Project

<= 2.7.10

📦

Hp

Linux Imaging And Printing Project

= 1.0

References & Advisories

🔗 http://bugs.gentoo.org/show_bug.cgi?id=195565

🔗 http://lists.opensuse.org/opensuse-security-announce/2007-10/msg00006.html

🔗 http://qa.mandriva.com/show_bug.cgi?id=30719

🔗 http://secunia.com/advisories/27202

🔗 http://secunia.com/advisories/27221

🔗 http://secunia.com/advisories/27224

🔗 http://secunia.com/advisories/27232

🔗 http://secunia.com/advisories/27271

相关漏洞威胁

CVE-2007-182210.0

Alcatel-Lucent Lucent Technologies voice mail systems allow remote attackers to retrieve or remove messages, or reconfigure mailbo...

CVE-2007-195910.0

Unspecified vulnerability in the process_cmdent function in command.cpp in TinyMUX before 2.4 has unknown impact and attack vector...

CVE-2007-350010.0

Xeweb XEForum allows remote attackers to gain privileges via a modified xeforum cookie.

CVE-2007-041710.0

BEA WebLogic Server 7.0 through 7.0 SP7, 8.1 through 8.1 SP5, 9.0, and 9.1, when using the WebLogic Server 6.1 compatibility realm...