PT-2010-5420 · Novell · Novell Iprint Client

Dr_Ide + 1 · Publicado 2010-12-23 · Atualizado 2011-09-21 · CVE-2010-4321

Positive Technologies (AI Summary)

CVSS v2.0

9.3

Alta

Vetor base

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Novell iPrint Client version 5.52

Description The issue is related to a stack-based buffer overflow in an ActiveX control. This occurs when a long argument is passed to the GetDriverSettings2 method, which can also be reached through the GetDriverSettings method. This allows remote attackers to execute arbitrary code.

Recommendations For Novell iPrint Client version 5.52, consider disabling the GetDriverSettings2 and GetDriverSettings methods as a temporary workaround until a patch is available. Restrict access to the ienipp.ocx ActiveX control to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

CVE-2010-4321

ZDI-10-256

Produtos afetados

Novell Iprint Client

Referências · 10

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/browser/novelliprint_getdriversettings_2.rb · Exploit
• 🔥 http://exploit-db.com/exploits/16014 · Exploit
• 🔥 https://exploit-db.com/exploits/16956 · Exploit
• 🔥 https://exploit-db.com/exploits/16014 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2010-4321 · Nota de Segurança
• https://zerodayinitiative.com/advisories/ZDI-10-256 · Nota de Segurança
• http://novell.com/support/viewContent.do?externalId=7007234 · Nota
• http://zerodayinitiative.com/advisories/ZDI-10-256 · Nota
• http://securityreason.com/securityalert/8125 · Nota
• http://securityfocus.com/bid/44966 · Nota