Novell iPrint Client Multiple Security Vulnerabilities

Bugtraq ID:	42100
Class:	Unknown
CVE:	CVE-2010-3106
Remote:	Yes
Local:	No
Published:	Jul 30 2010 12:00AM
Updated:	Sep 21 2010 08:21PM
Credit:	Ivan Almuina, Aaron Portnoy, TippingPoint DVLabs.
Vulnerable:
Not Vulnerable:

Novell iPrint Client Multiple Security Vulnerabilities

Novell iPrint Client is prone to remote a stack-based buffer overflow vulnerability, an arbitrary-file-deletion vulnerability, and multiple unspecified remote code-execution vulnerabilities.

Attackers may exploit these issues to execute arbitrary code or to delete arbitrary files. Failed attacks may cause denial-of-service conditions.

Novell iPrint Client 5.40 is vulnerable; other versions may also be affected.

Novell iPrint Client Multiple Security Vulnerabilities

Attackers can exploit these issues via a browser.

The following exploits are available for the stack overflow issue affecting 'ExecuteRequest':

• /data/vulnerabilities/exploits/42100.txt
• /data/vulnerabilities/exploits/42100-meta.rb

Novell iPrint Client Multiple Security Vulnerabilities

References:

• Novell Homepage (Novell)
  
• TPTI-10-05 Novell iPrint Client Browser Plugin Remote File Deletion Vulnerabilit (TippingPoint)
  
• TPTI-10-06 Novell iPrint Client Browser Plugin ExecuteRequest debug Parameter Re (TippingPoint)
  
• ZDI-10-138 Novell iPrint Server Queue Name Remote Code Execution Vulnerability (Zero Day Initiative)
  
• ZDI-10-139 Novell iPrint Client Browser Plugin Parameter Name Remote Code Execut (Zero Day Initiative)
  
• ZDI-10-140 Novell iPrint Client Browser Plugin operation Parameter Remote Code E (Zero Day Initiative)