← CVE Intelligence

CVE-2018-20106

SMB printer settings don't escape characters in passwords properly PUBLISHED

Description (CNA)

In yast2-printer up to and including version 4.0.2 the SMB printer settings don't escape characters in passwords properly. If a password with backticks or simliar characters is supplied this allows for executing code as root. This requires tricking root to enter such a password in yast.

Affected (CNA)

Vendor / productVersions
SUSE / yast2-printeraffected unspecified through 4.0.2

CWE

CWE-78

References

ADP enrichment

CVE

No English description supplied.