Novell iPrint Client Multiple Remote Code Execution Vulnerabilities

Bugtraq ID:	45301
Class:	Unknown
CVE:
Remote:	Yes
Local:	No
Published:	Dec 09 2010 12:00AM
Updated:	Dec 26 2010 10:03PM
Credit:	Zero Day Initiative
Vulnerable:	Novell iPrint Client 5.52 Novell iPrint Client 5.44 Novell iPrint Client 5.32 Novell iPrint Client 5.30 Novell iPrint Client 5.08 Novell iPrint Client 5.06 Novell iPrint Client 5.04
Not Vulnerable:	Novell iPrint Client 5.56

Novell iPrint Client Multiple Remote Code Execution Vulnerabilities

Novell iPrint Client is prone to multiple remote code-execution vulnerabilities.

Attackers may exploit these issues to execute arbitrary code within the context of the affected application. Failed exploit attempts will result in a denial-of-service condition.

Novell iPrint Client 5.52 is vulnerable; other versions may also be affected.

Novell iPrint Client Multiple Remote Code Execution Vulnerabilities

Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Novell iPrint Client Multiple Remote Code Execution Vulnerabilities

Solution:
Vendor updates are available. Please see the references for more information.

Novell iPrint Client Multiple Remote Code Execution Vulnerabilities

References:

• Novell Homepage (Novell)
  
• Security Vulnerability - iPrint Client call-back-url Remote Code Execution Vulne (Novell)
  
• Security Vulnerability - iPrint nipplib.dll IPP WideCharToMultiByte Remote Code (Novell)
  
• Security Vulnerability - iPrint nipplib.dll Location Header Remote Code Executio (Novell)
  
• iPrint Client for Windows XP/Vista/Win 7 5.56 (Novell)
  
• Novell iPrint Client Netscape Plugin call-back-url Parameter Remote Code Executi (Zero Day Initiative)
  
• Novell iPrint Client Netscape/ActiveX IPP Parameter Remote Code Execution Vulner (Zero Day Initiative)
  
• Novell iPrint Client Netscape/ActiveX Location Header Remote Code Execution Vuln (Zero Day Initiative)
  
• Novell iPrint Client Netscape/ActiveX Plugin HTTP_CONNECTION Remote Code Executi (Zero Day Initiative)
  
• Novell iPrint Client Netscape/ActiveX Plugin Wide Character IPP Remote Code Exec (Zero Day Initiative)
  
• Novell iPrint Client Netscape/ActiveX printer-state-reasons Remote Code Executio (Zero Day Initiative)
  
• Security Vulnerability - Novell iPrint Client Netscape/ActiveX printer-state-rea (Novell)
  
• Security Vulnerability - Novell iPrint nipplib.dll IPP strcpy Remote Code Execut (Novell)