PT-2012-1820
CVE-2011-4194
·
Published
2012-02-02
·
Updated
2020-02-24
Description by
CVSS 2.0
7.5
HighMetricsAV:N/AC:L/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions
Novell Open Enterprise Server 2 (OES2) versions through SP3 on Linux
Description
The issue is related to a buffer overflow in the Novell iPrint Server, allowing remote attackers to execute arbitrary code via a crafted
attributes-natural-language field.Recommendations
For Novell Open Enterprise Server 2 (OES2) versions through SP3 on Linux, consider disabling the
attributes-natural-language field in the Novell iPrint Server until a patch is available. Restrict access to the Novell iPrint Server to minimize the risk of exploitation. Found an issue in the description? Have something to add? Feel free to write us 👾