Fluid Attacks Database

Description

foomatic-rip filter, all versions, used insecurely creates temporary files for storage of PostScript data by rendering the data when the debug mode was enabled. This flaw may be exploited by a local attacker to conduct symlink attacks by overwriting arbitrary files accessible with the privileges of the user running the foomatic-rip universal print filter.

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem	Package	Affected version
debian 12	foomatic-filters	=4.0.17-16 \|\| =4.0.17-17
debian 11	foomatic-filters	=4.0.17-12 \|\| =4.0.17-13 \|\| =4.0.17-14 \|\| =4.0.17-15 \|\| =4.0.17-16 \|\| =4.0.17-17
debian 14	foomatic-filters	=4.0.17-16 \|\| =4.0.17-17
debian 13	foomatic-filters	=4.0.17-16 \|\| =4.0.17-17
rpm rhel5	foomatic	-
rpm rhel6	foomatic	-

Aliases

1. CVE-2011-29232. NVD-2011-29233. OSV-DEBIAN-2011-29234. OSV-2011-29235. SECURITY-TRACKER-CVE-2011-2923

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.