PT-2011-1502 · Novell · Novell Iprint+1

Francis Provencher · Publicado 2011-02-16 · Atualizado 2018-10-10 · CVE-2010-4328

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Novell iPrint versions in Open Enterprise Server 2 SP2 and SP3

Description The issue is related to multiple stack-based buffer overflows in the ipsmd binary of Novell iPrint for Linux. This allows remote attackers to execute arbitrary code via unspecified LPR opcodes.

Recommendations For Novell iPrint versions in Open Enterprise Server 2 SP2 and SP3, consider restricting access to the ipsmd binary until a patch is available. As a temporary workaround, avoid using unspecified LPR opcodes in the affected Novell iPrint versions until the issue is resolved.

Exploit

Correção

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

CVE-2010-4328

ZDI-11-087

Produtos afetados

Novell Iprint

Open Enterprise Server

Referências · 13

• 🔥 https://exploit-db.com/exploits/16192 · Exploit
• http://vupen.com/english/advisories/2011/0353 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2010-4328 · Nota de Segurança
• http://novell.com/support/viewContent.do?externalId=7007858&sliceId=1 · Aviso do Fabricante
• http://securityfocus.com/archive/1/516506/100/0/threaded · Nota
• http://osvdb.org/70852 · Nota
• http://download.novell.com/Download?buildid=KloKR_CmrBs~ · Nota
• http://securitytracker.com/id?1025074 · Nota
• https://zerodayinitiative.com/advisories/ZDI-11-087 · Nota de Segurança
• http://securityreason.com/securityalert/8096 · Nota
• http://zerodayinitiative.com/advisories/ZDI-11-087 · Nota
• http://securityfocus.com/bid/46309 · Nota
• http://secunia.com/advisories/43281 · Aviso do Fabricante