PT-2010-5420 · Novell · Novell Iprint Client

Dr_Ide + 1 · Published 2010-12-23 · Updated 2011-09-21 · CVE-2010-4321

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Novell iPrint Client version 5.52

Description The issue is related to a stack-based buffer overflow in an ActiveX control. This occurs when a long argument is passed to the GetDriverSettings2 method, which can also be reached through the GetDriverSettings method. This allows remote attackers to execute arbitrary code.

Recommendations For Novell iPrint Client version 5.52, consider disabling the GetDriverSettings2 and GetDriverSettings methods as a temporary workaround until a patch is available. Restrict access to the ienipp.ocx ActiveX control to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2010-4321

ZDI-10-256

Affected Products

Novell Iprint Client

References · 10

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/browser/novelliprint_getdriversettings_2.rb · Exploit
• 🔥 http://exploit-db.com/exploits/16014 · Exploit
• 🔥 https://exploit-db.com/exploits/16956 · Exploit
• 🔥 https://exploit-db.com/exploits/16014 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2010-4321 · Security Note
• https://zerodayinitiative.com/advisories/ZDI-10-256 · Security Note
• http://novell.com/support/viewContent.do?externalId=7007234 · Note
• http://zerodayinitiative.com/advisories/ZDI-10-256 · Note
• http://securityreason.com/securityalert/8125 · Note
• http://securityfocus.com/bid/44966 · Note