PT-2011-1502

CVE-2010-4328

·

Published

2011-02-16

·

Updated

2018-10-10

Description by

CVSS 2.0
7.5
High
MetricsAV:N/AC:L/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions Novell iPrint versions in Open Enterprise Server 2 SP2 and SP3
Description The issue is related to multiple stack-based buffer overflows in the ipsmd binary of Novell iPrint for Linux. This allows remote attackers to execute arbitrary code via unspecified LPR opcodes.
Recommendations For Novell iPrint versions in Open Enterprise Server 2 SP2 and SP3, consider restricting access to the ipsmd binary until a patch is available. As a temporary workaround, avoid using unspecified LPR opcodes in the affected Novell iPrint versions until the issue is resolved.
Exploitability
Exploit
Fix
Impacts
Researchers
Vendors
Affected products
Related identifiers
ZDI-11-087
Found an issue in the description? Have something to add? Feel free to write us 👾