CVE-2010-3107

2010-08-2322:00:03

CWE-264

[email protected]

web.nvd.nist.gov

cve-2010-3107

activex control

ienipp.ocx

browser plugin

novell iprint client

denial of service

logic flaw

6.7 Medium

AI Score

Confidence

Low

7.1 High

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:N/I:N/A:C

0.406 Medium

EPSS

Percentile

97.3%

JSON

A certain ActiveX control in ienipp.ocx in the browser plugin in Novell iPrint Client before 5.42 does not properly restrict the set of files to be deleted, which allows remote attackers to cause a denial of service (recursive file deletion) via unspecified vectors related to a “logic flaw” in the CleanUploadFiles method in the nipplib.dll module.

Affected configurations

NVD

Node

novelliprintRange≤5.40

novelliprintMatch4.26

novelliprintMatch4.27

novelliprintMatch4.28

novelliprintMatch4.30

novelliprintMatch4.32

novelliprintMatch4.34

novelliprintMatch4.36

novelliprintMatch4.38

novelliprintMatch5.04

novelliprintMatch5.12

novelliprintMatch5.20b

novelliprintMatch5.30

novelliprintMatch5.32

CPENameOperatorVersion
novell:iprintnovell iprintle5.40
novell:iprintnovell iprinteq4.26
novell:iprintnovell iprinteq4.27
novell:iprintnovell iprinteq4.28
novell:iprintnovell iprinteq4.30
novell:iprintnovell iprinteq4.32
novell:iprintnovell iprinteq4.34
novell:iprintnovell iprinteq4.36
novell:iprintnovell iprinteq4.38
novell:iprintnovell iprinteq5.04

CPE	Name	Operator	Version
novell:iprint	novell iprint	le	5.40
novell:iprint	novell iprint	eq	4.26
novell:iprint	novell iprint	eq	4.27
novell:iprint	novell iprint	eq	4.28
novell:iprint	novell iprint	eq	4.30
novell:iprint	novell iprint	eq	4.32
novell:iprint	novell iprint	eq	4.34
novell:iprint	novell iprint	eq	4.36
novell:iprint	novell iprint	eq	4.38
novell:iprint	novell iprint	eq	5.04