Ubuntu
foomatic-gui package

  1. Bug #811119
  2. Comment #3

Comment 3 for bug 811119

Revision history for this message
David (d--) wrote : Re: python-foomatic Possible command injection.

So now that I managed to get a 'lower case netbios name' - I decided to make my 'attacker' vm's netbios name '&reboot&'. Then on the 'victim' I opened foomatic-gui (via sudo) and attempted to 'discover remote printers' (after a little bit --> the "discover" code checks for tcp printers first see /usr/lib/python2.6/dist-packages/foomatic/detect.py 445 [0] ) the victim vm rebooted :)

[0] -
(remote_detect = [
    detect_tcp_printers,
    detect_smb_printers,
    ]
)