Unscored severity · published Nov 26, 2008
CVE-2008-2432
Insecure method vulnerability in the GetFileList method in an unspecified ActiveX control in Novell iPrint Client before 5.06 allows remote attackers to list the image files in an…
–
CVSS
1.3%
EPSS
No
On KEV
Description
Insecure method vulnerability in the GetFileList method in an unspecified ActiveX control in Novell iPrint Client before 5.06 allows remote attackers to list the image files in an arbitrary directory via a directory name in the argument.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.3% · higher than 71% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
IP
Iprint · Novell
through 5.04; 4.26; 4.27; 4.28; 4.30; 4.32; +3 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2008-2432
CVE.org
https://www.cve.org/CVERecord?id=CVE-2008-2432
Vendor Advisory
http://secunia.com/advisories/30667
Vendor Advisory
http://secunia.com/secunia_research/2008-30/advisory/
www.securityfocus.com
http://www.securityfocus.com/bid/30813
More from Iprint
8.8
CVE-2010-4314
Remote attackers can use the iPrint web-browser ActiveX plugin in Novell iPrint Client before 5.42 for Windows XP/Vista/Win7 to execute code by overflowing the "name" parameter
–
CVE-2013-3708
The id1.GetPrinterURLList function in Novell iPrint Client before 5.93 allows remote attackers to cause a denial of service via unspecified vectors
–
CVE-2013-1091
Stack-based buffer overflow in Novell iPrint Client before 5.90 allows remote attackers to execute arbitrary code via unspecified vectors
–
CVE-2012-0411
Unspecified vulnerability in Novell iPrint Client before 5.82 allows remote attackers to execute arbitrary code via an op-client-interface-version action
–
CVE-2011-4187
Buffer overflow in the GetDriverSettings function in nipplib.dll in Novell iPrint Client before 5.78 on Windows allows remote attackers to execute arbitrary code via a long realm…