ZDI-11-087: Novell iPrint LPD Remote Code Execution Vulnerability

ZDI-11-087: Novell iPrint LPD Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-11-087 February 16, 2011 -- CVE ID: CVE-2010-4328 -- CVSS: 9, AV:N/AC:L/Au:N/C:P/I:P/A:C -- Affected Vendors: Novell -- Affected Products: Novell iPrint -- TippingPointTM IPS Customer...

CVE-2010-4328

CVE-2010-4328 affects Novell iPrint for Linux Open Enterprise Server 2 SP2/SP3. The root cause is multiple stack-based buffer overflows in ipsmd (/opt/novell/iprint/bin/ipsmd) when handling multiple LPR opcodes, allowing remote code execution via unauthenticated access to TCP port 515 (ilprsrvd)....