The cupshelpers scripts in system-config-printer in Ubuntu 11.04 and 11.10, as used by the automatic printer driver download service, uses…

published 2011-11-29 14 y ago modified 2026-06-16 4 mo ago also EUVD-2011-4334

cvss: 7.5; version 2.0, NVD
cisa kev: Not listed; not in CISA's catalog
epss: 3.4%; EPSS 3.4% chance of exploitation in 30 days, percentile 88%
public exploits: 0; none known

The cupshelpers scripts in system-config-printer in Ubuntu 11.04 and 11.10, as used by the automatic printer driver download service, uses an "insecure connection" for queries to the OpenPrinting database, which allows remote attackers to execute arbitrary code via a man-in-the-middle (MITM) attack that modifies packages or repositories.

Patch / fix

distros 1

system-config-printer Debian 14, Debian 13, Debian 12 1.3.7-1

debian advisories DEBIAN-CVE-2011-4405

Vendor advisories

What the vendors themselves say about their products: affected, fixed or not affected, and what to do.

red hat product security vex CVE-2011-4405 updated 2026-11-05 cvss 5.8

system-config-printer: possible MITM due to use of insecure connections

Red Hat Enterprise Linux 5 system-config-printer Red Hat Enterprise Linux 6 system-config-printer, system-config-printer-libs, system-config-printer-udev
not affected: vulnerable code not present

Red Hat CSAF VEX © Red Hat, Inc., from https://security.access.redhat.com/data/csaf/v2/vex/; changed: reduced to product statuses and remediations. CC BY 4.0 · csaf

Exploit prediction

3.36% chance of exploitation in the next 30 days, higher than 88% of all scored CVEs (FIRST EPSS, 2026-11-09).

CVSS scores

assigned by	version	score	vector
NVD	2.0	7.5	AV:N/AC:L/Au:N/C:P/I:P/A:P

Classification

Weakness

CWE-20 Improper Input Validation

References

ubuntu.com /usn/USN-1265-1
vendor-advisory
secunia.com /advisories/46909
third-party-advisory, vendor-advisory
securityfocus.com /bid/50721
vdb-entry
exchange.xforce.ibmcloud.com /vulnerabilities/71394
vdb-entry
osvdb.org /77214
vdb-entry

Sources

CVE List CVE-2011-4405
NVD CVE-2011-4405

Fencer Intel keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.

Summary