Novell iPrint Client 'nipplib.dll' Remote Code Execution Vulnerability
BID:50367
Info
Novell iPrint Client 'nipplib.dll' Remote Code Execution Vulnerability
| Bugtraq ID: | 50367 |
| Class: | Boundary Condition Error |
| CVE: |
CVE-2011-3173 |
| Remote: | Yes |
| Local: | No |
| Published: | Oct 26 2011 12:00AM |
| Updated: | Nov 21 2011 12:15PM |
| Credit: | gwslabs |
| Vulnerable: |
Novell Open Enterprise Server 2 Service Pack 3 0 Novell iPrint Client 5.64 Novell iPrint Client 5.56 Novell iPrint Client 5.52 Novell iPrint Client 5.44 Novell iPrint Client 5.32 Novell iPrint Client 5.30 Novell iPrint Client 5.08 Novell iPrint Client 5.06 Novell iPrint Client 5.04 Novell iPrint Client 4.38 Novell iPrint Client 4.36 Novell iPrint Client 4.34 |
| Not Vulnerable: |
Novell iPrint Client 5.72 |
Discussion
Novell iPrint Client 'nipplib.dll' Remote Code Execution Vulnerability
Novell iPrint Client is prone to a remote code-execution vulnerability.
Attackers may exploit this issue to execute arbitrary code within the context of the affected application. Failed exploit attempts may result in a denial-of-service condition.
Versions prior to Novell iPrint Client 5.72 are vulnerable.
Novell iPrint Client is prone to a remote code-execution vulnerability.
Attackers may exploit this issue to execute arbitrary code within the context of the affected application. Failed exploit attempts may result in a denial-of-service condition.
Versions prior to Novell iPrint Client 5.72 are vulnerable.
Exploit / POC
Novell iPrint Client 'nipplib.dll' Remote Code Execution Vulnerability
A working commercial exploit is available through VUPEN Security - Exploit and PoCs Service. This exploit is not otherwise publicly available or known to be circulating in the wild.
A working commercial exploit is available through VUPEN Security - Exploit and PoCs Service. This exploit is not otherwise publicly available or known to be circulating in the wild.
Solution / Fix
Novell iPrint Client 'nipplib.dll' Remote Code Execution Vulnerability
Solution:
Vendor updates are available. Please see the references for more information.
Solution:
Vendor updates are available. Please see the references for more information.
References
Novell iPrint Client 'nipplib.dll' Remote Code Execution Vulnerability
References:
References:
- Novell Homepage (Novell)
- November 2011 Scheduled Maintenance on OES2 SP3 for iPrint client 7799 (Novell)
- November 2011 Scheduled Maintenance on OES2 SP3 for iPrint client 7799 (Novell)
- iPrint Client for Windows XP/Vista/Win 7 5.72 (Novell)
- ZDI-11-309 Novell iPrint Client nipplib.dll GetDriverSettings Remote Code Execut (Zero Day Initiative)