CVE-2007-5208

high HPE
CVSS v3 Base Score
7.6
AV:N/AC:H/Au:N/C:C/I:C/A:C
EPSS Score
73.7%
Exploitation probability in 30 days
Top 1% most likely to be exploited
Attack Characteristics
Attack Vector
Network
Attack Complexity
High
Confidentiality
C
Integrity
C
Availability
C
Published: October 13, 2007 (6788 days ago)
Last Modified: April 23, 2026
Vendor: HPE
Source: NVD

Description

hpssd in Hewlett-Packard Linux Imaging and Printing Project (hplip) 1.x and 2.x before 2.7.10 allows context-dependent attackers to execute arbitrary commands via shell metacharacters in a from address, which is not properly handled when invoking sendmail.

CWE

CWE-20

Affected Products

hp linux imaging and printing project

References

🔗 bugs.gentoo.org 🔗 lists.opensuse.org 🔗 qa.mandriva.com 🔗 secunia.com 🔗 secunia.com