CVE-2010-3107

Currently unrated

Key Information:

Vendor
Novell
Status
Iprint
Vendor
CVE Published:
23 August 2010

Summary

A certain ActiveX control in ienipp.ocx in the browser plugin in Novell iPrint Client before 5.42 does not properly restrict the set of files to be deleted, which allows remote attackers to cause a denial of service (recursive file deletion) via unspecified vectors related to a "logic flaw" in the CleanUploadFiles method in the nipplib.dll module.

References

http://dvlabs.tippingpoint.com/advisory/TPTI-10-05
x_refsource_MISC
http://download.novell.com/Download?buildid=ftwZBxEFjIg~
x_refsource_CONFIRM
https://oval.cisecurity.org/repository/search/definition/...
vdb-entrysignaturex_refsource_OVAL

EPSS Score

40% chance of being exploited in the next 30 days.

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Collectors

NVD DatabaseMitre Database
.