PT-2011-1502
CVE-2010-4328
·
Published
2011-02-16
·
Updated
2018-10-10
Description by
CVSS 2.0
7.5
HighMetricsAV:N/AC:L/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions
Novell iPrint versions in Open Enterprise Server 2 SP2 and SP3
Description
The issue is related to multiple stack-based buffer overflows in the ipsmd binary of Novell iPrint for Linux. This allows remote attackers to execute arbitrary code via unspecified LPR opcodes.
Recommendations
For Novell iPrint versions in Open Enterprise Server 2 SP2 and SP3, consider restricting access to the ipsmd binary until a patch is available.
As a temporary workaround, avoid using unspecified LPR opcodes in the affected Novell iPrint versions until the issue is resolved.
Exploitability
Exploit
Fix
Impacts
Researchers
Vendors
Affected products
Found an issue in the description? Have something to add? Feel free to write us 👾