Novell iPrint Client ActiveX Control Multiple Vulnerabilities

High Nessus Plugin ID 34049


The remote Windows host has an ActiveX control that is affected by multiple vulnerabilities.


Novell iPrint Client is installed on the remote host.

An ActiveX control included with Novell iPrint Client is affected by multiple vulnerabilities.

- Vulnerabilities affecting GetDriverFile(), GetDriverSettings() GetPrinterURLList(), GetFileList(), GetServerVersion(), UploadResource(), ExecuteRequest(), UploadResource(), and UploadResourceToRMS() methods in 'ienipp.ocx' could be exploited to perform stack based buffer overflows and execute arbitrary code on the remote system. (CVE-2008-2431)

- A vulnerability in IppGetDriverSettings() method in nipplib.dll could be exploited to perform a stack based buffer overflow (CVE-2008-5231).

- A vulnerability in GetFileList() method may disclose sensitive information. (CVE-2008-2432)


Upgrade to version 5.06.

See Also

Plugin Details

Severity: High

ID: 34049

File Name: novell_iprint_activex_multiple_vulns.nasl

Version: $Revision: 1.19 $

Type: local

Agent: windows

Family: Windows

Published: 2008/08/26

Modified: 2017/08/15

Dependencies: 11936, 13855

Risk Information

Risk Factor: High


Base Score: 9.3

Temporal Score: 7.7

Vector: CVSS2#AV:N/AC:M/Au:N/C:C/I:C/A:C

Temporal Vector: CVSS2#E:F/RL:OF/RC:ND

Vulnerability Information

CPE: cpe:/a:novell:iprint

Required KB Items: SMB/Registry/Enumerated

Exploit Available: true

Exploit Ease: Exploits are available

Patch Publication Date: 2008/08/22

Exploitable With

CANVAS (D2ExploitPack)

Reference Information

CVE: CVE-2008-2431, CVE-2008-2432, CVE-2008-5231

BID: 30813

OSVDB: 50687, 50688, 51684, 88206, 88207, 88208, 88209, 88210, 88211, 88212

Secunia: 30667

CWE: 119, 200