hp-makeuri does not resolve FQDN => could add only local domain printer

[broucaries]

This bug does not allow to add printer in another domain than local domain. It is a shame and could lead to security problem in entreprise setup (want to print to anther domain some confidential document).

Please fix it.

$ hp-makeuri HPD4636B.lan.
error: Device not found

$hp-makeuri HPD4636B

HP Linux Imaging and Printing System (ver. 3.11.10)
Device URI Creation Utility ver. 5.0

Copyright (c) 2001-9 Hewlett-Packard Development Company, LP
This software comes with ABSOLUTELY NO WARRANTY.
This is free software, and you are welcome to distribute it
under certain conditions. See COPYING file for more details.

CUPS URI: hp:/net/Photosmart_C309a_series?zc=HPD4636B
SANE URI: hpaio:/net/Photosmart_C309a_series?zc=HPD4636B
HP Fax URI: hpfax:/net/Photosmart_C309a_series?zc=HPD4636B

Done.

$ host -v HPD4636B
Trying "HPD4636B.lan"
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 34639
;; flags: qr aa rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 0

;; QUESTION SECTION:
;HPD4636B.lan. IN A

;; ANSWER SECTION:
HPD4636B.lan. 0 IN A 192.168.10.2

Received 46 bytes from 192.168.10.1#53 in 3 ms
Trying "HPD4636B.lan"
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 18443
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 0

;; QUESTION SECTION:
;HPD4636B.lan. IN AAAA

Received 30 bytes from 192.168.10.1#53 in 5 ms
Trying "HPD4636B.lan"
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 63612
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 0

;; QUESTION SECTION:
;HPD4636B.lan. IN MX

Received 30 bytes from 192.168.10.1#53 in 2 ms

$

[broucaries (roucaries-bastien+bugs)]

http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=653062

[Daniel Manrique (roadmr)]

This seems to belong in hplip. I'll also add the upstream tracker URL you referred to. Thanks!

[Till Kamppeter (till-kamppeter)]

This is a problem of HP's upstream code. Adding upstream task ...

Can someone at HP have a look into this? Thanks.

[broucaries (roucaries-bastien+bugs)]

Any news ?.

[goutam kodu (goutam-hplip)]

HI Broucaries.

Sorry of late response on this.
Will take a look at this and resolve it.

Regards,
Goutam

[broucaries (roucaries-bastien+bugs)]

Any news of this bug ? Any news of the secuirty implication ?

[broucaries (roucaries-bastien+bugs)]

Security team please review this bug. I think it is low impact but nevertheless a defect from a secuirty point o view

[Marc Deslauriers (mdeslaur)]

Thanks for taking the time to report this bug and helping to make Ubuntu better. We appreciate the difficulties you are facing, but this appears to be a "regular" (non-security) bug. I have unmarked it as a security issue since this bug does not show evidence of allowing attackers to cross privilege boundaries nor directly cause loss of data/privacy. Please feel free to report any other bugs you may find.

[Launchpad Janitor (janitor)]

Status changed to 'Confirmed' because the bug affects multiple users.

[broucaries (roucaries-bastien+bugs)]

goutam-hplip: one year since assigned ....

Please correct.

Security test case . I am a teacher in a big uni. uni with a lot a the same hp printer, I want to print confidential documents for testing my student. This document does not print in the good printer but on the student rooms printer....