PT-2011-1502 · Novell · Novell Iprint+1

Francis Provencher · Published 2011-02-16 · Updated 2018-10-10 · CVE-2010-4328

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Novell iPrint versions in Open Enterprise Server 2 SP2 and SP3

Description The issue is related to multiple stack-based buffer overflows in the ipsmd binary of Novell iPrint for Linux. This allows remote attackers to execute arbitrary code via unspecified LPR opcodes.

Recommendations For Novell iPrint versions in Open Enterprise Server 2 SP2 and SP3, consider restricting access to the ipsmd binary until a patch is available. As a temporary workaround, avoid using unspecified LPR opcodes in the affected Novell iPrint versions until the issue is resolved.

Exploit

Fix

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2010-4328

ZDI-11-087

Affected Products

Novell Iprint

Open Enterprise Server

References · 13

• 🔥 https://exploit-db.com/exploits/16192 · Exploit
• http://vupen.com/english/advisories/2011/0353 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2010-4328 · Security Note
• http://novell.com/support/viewContent.do?externalId=7007858&sliceId=1 · Vendor Advisory
• https://zerodayinitiative.com/advisories/ZDI-11-087 · Security Note
• http://secunia.com/advisories/43281 · Vendor Advisory
• http://securityfocus.com/archive/1/516506/100/0/threaded · Note
• http://osvdb.org/70852 · Note
• http://download.novell.com/Download?buildid=KloKR_CmrBs~ · Note
• http://securitytracker.com/id?1025074 · Note
• http://securityreason.com/securityalert/8096 · Note
• http://zerodayinitiative.com/advisories/ZDI-11-087 · Note
• http://securityfocus.com/bid/46309 · Note