Novell iPrint Client Multiple Remote Code Execution Vulnerabilities

Bugtraq ID:	48124
Class:	Unknown
CVE:	CVE-2011-1699 CVE-2011-1700 CVE-2011-1701 CVE-2011-1702 CVE-2011-1703 CVE-2011-1704 CVE-2011-1705 CVE-2011-1706 CVE-2011-1707 CVE-2011-1708
Remote:	Yes
Local:	No
Published:	Jun 06 2011 12:00AM
Updated:	Jun 06 2011 12:00AM
Credit:	Ivan Rodriguez Almuina through The Zero Day Initiative
Vulnerable:	Novell iPrint Client 5.56 Novell iPrint Client 5.52 Novell iPrint Client 5.44 Novell iPrint Client 5.32 Novell iPrint Client 5.30 Novell iPrint Client 5.08 Novell iPrint Client 5.06 Novell iPrint Client 5.04
Not Vulnerable:	Novell iPrint Client 5.64

Novell iPrint Client Multiple Remote Code Execution Vulnerabilities

Novell iPrint Client is prone to multiple remote code-execution vulnerabilities.

Attackers may exploit these issues to execute arbitrary code within the context of the affected application. Failed exploit attempts will result in a denial-of-service condition.

Versions prior to Novell iPrint Client 5.64 are vulnerable.

Novell iPrint Client Multiple Remote Code Execution Vulnerabilities

Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Novell iPrint Client Multiple Remote Code Execution Vulnerabilities

Solution:
Vendor updates are available. Please see the references for more information.

Novell iPrint Client Multiple Remote Code Execution Vulnerabilities

References:

• Novell Homepage (Novell)
  
• iPrint Client for Windows XP/Vista/Win 7 5.64 (Novell)
  
• ZDI-11-172 Novell iPrint nipplib.dll uri Remote Code Execution Vulnerability (Zero Day Initiative)
  
• ZDI-11-173 Novell iPrint nipplib.dll profile-time Remote Code Execution Vulnerab (Zero Day Initiative)
  
• ZDI-11-174 Novell iPrint nipplib.dll profile-name Remote Code Execution Vulnerab (Zero Day Initiative)
  
• ZDI-11-175 Novell iPrint nipplib.dll file-date-time Remote Code Execution Vulner (Zero Day Initiative)
  
• ZDI-11-176 Novell iPrint nipplib.dll driver-version Remote Code Vulnerability (Zero Day Initiative)
  
• ZDI-11-177 Novell iPrint nipplib.dll core-package Remote Code Execution Vulnerab (Zero Day Initiative)
  
• ZDI-11-178 Novell iPrint nipplib.dll client-file-name Remote Code Execution Vuln (Zero Day Initiative)
  
• ZDI-11-179 Novell iPrint nipplib.dll iprint-client-config-info Remote Code Execu (Zero Day Initiative)
  
• ZDI-11-180 Novell iPrint op-printer-list-all-jobs cookie Remote Code Execution V (Zero Day Initiative)
  
• ZDI-11-181 Novell iPrint op-printer-list-all-jobs url Remote Code Execution Vuln (Zero Day Initiative)