7.6
CVE-2007-5208
- EPSS 73.52%
- Published 13.10.2007 00:17:00
- Last modified 09.04.2025 00:30:58
- Source security@ubuntu.com
- Teams watchlist Login
- Open Login
hpssd in Hewlett-Packard Linux Imaging and Printing Project (hplip) 1.x and 2.x before 2.7.10 allows context-dependent attackers to execute arbitrary commands via shell metacharacters in a from address, which is not properly handled when invoking sendmail.
Data is provided by the National Vulnerability Database (NVD)
Hp ≫ Linux Imaging And Printing Project Version <= 2.7.10
Hp ≫ Linux Imaging And Printing Project Version1.0
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
| Type | Source | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 73.52% | 0.987 |
| Source | Base Score | Exploit Score | Impact Score | Vector string |
|---|---|---|---|---|
| nvd@nist.gov | 7.6 | 4.9 | 10 |
AV:N/AC:H/Au:N/C:C/I:C/A:C
|
CWE-20 Improper Input Validation
The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.