A vulnerability has been reported in Netatalk, which potentially can be exploited by malicious users to compromise a vulnerable system.

The vulnerability is caused due to the papd daemon improperly sanitising several received parameters before passing them in a call to "popen()". This can be exploited to execute arbitrary commands via a specially crafted printing request.

Successful exploitation requires that a printer is configured to pass arbitrary values as parameters to a piped command.

The vulnerability is reported in versions prior to 2.0.4-beta2.

Solution
Update to version 2.0.4.
Further details available to Secunia VIM customers

Provided and/or discovered by
Reported by the vendor.

Changelog
Further details available to Secunia VIM customers

Original Advisory
http://sourceforge.net/project/shownotes.php?release_id=686071
http://sourceforge.net/project/shownotes.php?release_id=648189

Deep Links
Links available to Secunia VIM customers