Detections
Analytics
Novell iPrint Client < 5.78 Multiple Code Execution Vulnerabilities
high Nessus Plugin ID 57890
Language:
Synopsis
The remote host contains an application that is affected by multiple code execution vulnerabilities.Description
The version of Novell iPrint Client installed on the remote host is earlier than 5.78. Such versions are reportedly affected by one or more of the following vulnerabilities that can allow for arbitrary code execution :- An unspecified issue exists in the GetDriverSettings realm in nipplib.dll. (CVE-2011-4187)
- An unspecified issue exists in GetPrinterURLList2 in the ActiveX control. (CVE-2011-4185)
- An unspecified issue exists in client-file-name parsing in nipplib.dll. (CVE-2011-4186)
Solution
Upgrade to Novell iPrint Client 5.78 or later.See Also
http://dvlabs.tippingpoint.com/advisory/TPTI-12-02
https://www.zerodayinitiative.com/advisories/ZDI-12-102/
https://www.zerodayinitiative.com/advisories/ZDI-12-181/
https://www.securityfocus.com/archive/1/524037/30/0/threaded
Plugin Details
Severity: High
ID: 57890
File Name: novell_iprint_578.nasl
Version: 1.7
Type: local
Agent: windows
Family: Windows
Published: 2/10/2012
Updated: 11/15/2018
Supported Sensors: Nessus Agent, Nessus
Risk Information
VPR
Risk Factor: Medium
Score: 5.9
CVSS v2
Risk Factor: High
Base Score: 9.3
Temporal Score: 6.9
Vector: CVSS2#AV:N/AC:M/Au:N/C:C/I:C/A:C
Vulnerability Information
CPE: cpe:/a:novell:iprint
Required KB Items: SMB/Novell/iPrint/Version, SMB/Novell/iPrint/Version_UI
Exploit Ease: No known exploits are available
Patch Publication Date: 2/9/2012
Vulnerability Publication Date: 2/9/2012
Reference Information
CVE: CVE-2011-4185, CVE-2011-4186, CVE-2011-4187
BID: 51926