CVE-2010-1527

Summary (CVE-2010-1527): A stack-based buffer overflow in Novell iPrint Client (ienipp.ocx) allows remote code execution via an overly long call-back-url parameter in the op-client-interface-version action. Affected product: Novell iPrint Client ActiveX/Browser Plugin; vulnerable component/file: ...

CVE-2010-1527

Stack-based buffer overflow in Novell iPrint Client before 5.44 allows remote attackers to execute arbitrary code via a long call-back-url parameter in an op-client-interface-version action...

CVE-2010-3106

CVE-2010-3106 affects the ienipp.ocx ActiveX control in the browser plugin of Novell iPrint Client prior to version 5.42. The vulnerability arises from improper validation of the debug parameter, allowing a crafted length to trigger a stack memory corruption that can lead to remote code execution...

CVE-2010-3109

CVE-2010-3109 describes a stack-based buffer overflow in the browser plugin of Novell iPrint Client prior to 5.42, triggered by a long operation parameter. The vulnerable component is the iPrint Client’s browser plugin (likely related to nipplib.dll), and the root cause is a stack-based overflow ...

CVE-2010-3109

Stack-based buffer overflow in the browser plugin in Novell iPrint Client before 5.42 allows remote attackers to execute arbitrary code via a long operation parameter...

CVE-2010-3105

The CVE-2010-3105 entry concerns Novell iPrint Client before 5.44, where PluginGetDriverFile may interpret an uninitialized memory location as a pointer, enabling remote code execution via unspecified vectors. Multiple connected sources (OpenVAS NASL, Nessus entries, NVD description) corroborate:...

CVE-2010-3105

The PluginGetDriverFile function in Novell iPrint Client before 5.44 interprets an uninitialized memory location as a pointer value, which allows remote attackers to execute arbitrary code via unspecified vectors. NOTE: the provenance of this information is unknown; the details are obtained solel...

CVE-2010-3106

The ienipp.ocx ActiveX control in the browser plugin in Novell iPrint Client before 5.42 does not properly validate the debug parameter, which allows remote attackers to execute arbitrary code or cause a denial of service stack memory corruption via a parameter value with a crafted length, relate...

CVE-2010-3108

Buffer overflow in the browser plugin in Novell iPrint Client before 5.42 allows remote attackers to execute arbitrary code by using EMBED elements to pass parameters with long names...

CVE-2010-3107

A certain ActiveX control in ienipp.ocx in the browser plugin in Novell iPrint Client before 5.42 does not properly restrict the set of files to be deleted, which allows remote attackers to cause a denial of service recursive file deletion via unspecified vectors related to a "logic flaw" in the...

CVE-2010-3108: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in the browser plugin in Novell iPrint Client before 5.42 allows remote attackers to execute arbitrary code by using EMBED elements to pass parameters with long names...

CVE-2010-3105: Improper Restriction of Operations within the Bounds of a Memory Buffer

The PluginGetDriverFile function in Novell iPrint Client before 5.44 interprets an uninitialized memory location as a pointer value, which allows remote attackers to execute arbitrary code via unspecified vectors. NOTE: the provenance of this information is unknown; the details are obtained solel...

Novell iPrint Client < 5.44 Multiple Vulnerabilities

Novell iPrint Client version older than 5.44 is installed on the remote host. Such versions are reportedly affected by multiple remote code execution vulnerabilities: - A buffer overflow was discovered in how iPrint client handles the 'call-back-url' parameter value for a...

CVE-2010-1527: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in Novell iPrint Client before 5.44 allows remote attackers to execute arbitrary code via a long call-back-url parameter in an op-client-interface-version action...

CVE-2010-3107: Undefined Security Weakness

A certain ActiveX control in ienipp.ocx in the browser plugin in Novell iPrint Client before 5.42 does not properly restrict the set of files to be deleted, which allows remote attackers to cause a denial of service recursive file deletion via unspecified vectors related to a "logic flaw" in the...

CVE-2010-3106: Improper Input Validation

The ienipp.ocx ActiveX control in the browser plugin in Novell iPrint Client before 5.42 does not properly validate the debug parameter, which allows remote attackers to execute arbitrary code or cause a denial of service stack memory corruption via a parameter value with a crafted length, relate...

CVE-2010-3109: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in the browser plugin in Novell iPrint Client before 5.42 allows remote attackers to execute arbitrary code via a long operation parameter...

Novell iPrint Client ActiveX Control call-back-url Buffer Overflow

This module exploits a stack-based buffer overflow in Novell iPrint Client 5.42. When sending an overly long string to the 'call-back-url' parameter in an op-client-interface-version action of ienipp.ocx an attacker may be able to execute arbitrary code. Module Options msf use...

Novell iPrint Client < 5.42 Multiple Flaws

Novell iPrint Client version older than 5.42 is installed on the remote host. Such versions are reportedly affected by multiple vulnerabilities : - Due to a flaw in nipplib.dll module, it may be possible for a remote attacker to delete arbitrary files from the remote system via the...

Novell iPrint Client Multiple Security Vulnerabilities (Linux)

The host is installed Novell iPrint Client and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbnovelliprintclientmultvulnlin.nasl 5323 2017-02-17 08:49:23Z teissa $ Novell iPrint Client Multiple Security Vulnerabilities Linux Authors: Madhuri D Copyright: Copyright c 2010...