CVE:CVE-2015-8560
CNNVD:CNNVD-201603-309
Apple CUPS（Common Unix Printing System）是美国苹果（Apple）公司的一套开源的用于OS X和类Unix系统的打印系统。cups-filters是一个提供了CUPS过滤器的包。Foomatic是一套用于将Unix下的通用后台打印系统与开源的打印机驱动整合在一起的数据库驱动打印系统。foomatic-filters是其中的一个用于帮助后台打印系统将PostScript转成打印机语言的包。
Foomatic 4.0.x版本的foomatic-filters和cups-filters 1.4.0之前1.0.42版本的foomatic-rip中的util.c文件存在不完整黑名单漏洞。远程攻击者可借助打印任务中的‘;’字符利用该漏洞执行任意命令。
solution:Upgrade canonical ubuntu_linux to a higher version than 12.04,14.04,15.04,15.10,and avoid the version 12.04,14.04,15.04,15.10; Upgrade debian debian_linux to a higher version than 8.0,and avoid the version 8.0; Upgrade linuxfoundation cups-filters to a higher version than 1.0.42,1.0.43,1.0.44,1.0.45,1.0.46,1.0.47,1.0.48,1.0.49,1.0.50,1.0.51,1.0.52,1.0.53,1.0.54,1.0.55,1.0.56,1.0.57,1.0.58,1.0.59,1.0.60,1.0.61,1.0.62,1.0.63,1.0.64,1.0.65,1.0.66,1.0.67,1.0.68,1.0.69,1.0.70,1.0.71,1.0.72,1.0.73,1.0.74,1.0.75,1.0.76,1.1.0,1.2.0,1.3.0,and avoid the version 1.0.42,1.0.43,1.0.44,1.0.45,1.0.46,1.0.47,1.0.48,1.0.49,1.0.50,1.0.51,1.0.52,1.0.53,1.0.54,1.0.55,1.0.56,1.0.57,1.0.58,1.0.59,1.0.60,1.0.61,1.0.62,1.0.63,1.0.64,1.0.65,1.0.66,1.0.67,1.0.68,1.0.69,1.0.70,1.0.71,1.0.72,1.0.73,1.0.74,1.0.75,1.0.76,1.1.0,1.2.0,1.3.0; Upgrade linuxfoundation foomatic-filters to a higher version than 4.0.0,4.0.1,4.0.2,4.0.3,4.0.4,4.0.5,4.0.6,4.0.7,4.0.8,4.0.9,4.0.10,4.0.11,4.0.12,4.0.13,4.0.14,4.0.15,4.0.16,4.0.17,and avoid the version 4.0.0,4.0.1,4.0.2,4.0.3,4.0.4,4.0.5,4.0.6,4.0.7,4.0.8,4.0.9,4.0.10,4.0.11,4.0.12,4.0.13,4.0.14,4.0.15,4.0.16,4.0.17