CVE-2008-2432

Insecure method vulnerability in the GetFileList method in an unspecified ActiveX control in Novell iPrint Client before 5.06 allows remote attackers to list the image files in an arbitrary directory via a directory name in the argument.

CVSS v2.0 5.0 MEDIUM

5.0^/10

CVSS v2.0 : MEDIUM

Vector : AV:N/AC:L/Au:N/C:P/I:N/A:N

Exploitability : 10.0 / Impact : 2.9

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact NONE

Availability Impact NONE

References

Link	Resource
http://secunia.com/advisories/30667	Vendor Advisory
http://secunia.com/secunia_research/2008-30/advisory/	Vendor Advisory
http://www.securityfocus.com/bid/30813
http://secunia.com/advisories/30667	Vendor Advisory
http://secunia.com/secunia_research/2008-30/advisory/	Vendor Advisory
http://www.securityfocus.com/bid/30813

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:novell:iprint::::::::
	cpe:2.3:a:novell:iprint:4.26:::::::*
	cpe:2.3:a:novell:iprint:4.27:::::::*
	cpe:2.3:a:novell:iprint:4.28:::::::*
	cpe:2.3:a:novell:iprint:4.30:::::::*
	cpe:2.3:a:novell:iprint:4.32:::::::*
	cpe:2.3:a:novell:iprint:4.34:::::::*
	cpe:2.3:a:novell:iprint:4.36:::::::*
	cpe:2.3:a:novell:iprint:4.38:::::::*

History

21 Nov 2024, 00:46

Type	Values Removed	Values Added
References	~~() http://secunia.com/advisories/30667 - Vendor Advisory~~	() http://secunia.com/advisories/30667 - Vendor Advisory
References	~~() http://secunia.com/secunia_research/2008-30/advisory/ - Vendor Advisory~~	() http://secunia.com/secunia_research/2008-30/advisory/ - Vendor Advisory
References	~~() http://www.securityfocus.com/bid/30813 -~~	() http://www.securityfocus.com/bid/30813 -

Information

Published : 2008-11-26 01:30

Updated : 2024-11-21 00:46

NVD link : CVE-2008-2432

Mitre link : CVE-2008-2432

CVE.ORG link : CVE-2008-2432

JSON object : View

Products Affected

novell

iprint

CWE

CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

{"id": "CVE-2008-2432", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 5.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N", "authentication": "NONE", "integrityImpact": "NONE", "accessComplexity": "LOW", "availabilityImpact": "NONE", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2008-11-26T01:30:00.390", "references": [{"url": "http://secunia.com/advisories/30667", "tags": ["Vendor Advisory"], "source": "PSIRT-CNA@flexerasoftware.com"}, {"url": "http://secunia.com/secunia_research/2008-30/advisory/", "tags": ["Vendor Advisory"], "source": "PSIRT-CNA@flexerasoftware.com"}, {"url": "http://www.securityfocus.com/bid/30813", "source": "PSIRT-CNA@flexerasoftware.com"}, {"url": "http://secunia.com/advisories/30667", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://secunia.com/secunia_research/2008-30/advisory/", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.securityfocus.com/bid/30813", "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-200"}]}], "descriptions": [{"lang": "en", "value": "Insecure method vulnerability in the GetFileList method in an unspecified ActiveX control in Novell iPrint Client before 5.06 allows remote attackers to list the image files in an arbitrary directory via a directory name in the argument."}, {"lang": "es", "value": "Vulnerabilidad de m\u00e9todo inseguro en el m\u00e9todo GetFileList en un control ActiveX no especificado en Novell iPrint Client anterior a v5.06 permite a atacantes remotos listar los archivos de imagen en un directorio de su elecci\u00f3n mediante un nombre de directorio en el argumento."}], "lastModified": "2024-11-21T00:46:52.470", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:novell:iprint:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A5538B39-4C1E-42AE-9B93-6203C77A9C91", "versionEndIncluding": "5.04"}, {"criteria": "cpe:2.3:a:novell:iprint:4.26:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "3332CB43-D2ED-4720-8ED4-AE222C6F7FF3"}, {"criteria": "cpe:2.3:a:novell:iprint:4.27:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E9AD9057-2218-481E-96CB-BF568AD3A9F2"}, {"criteria": "cpe:2.3:a:novell:iprint:4.28:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0D044326-00CB-4158-A652-7D7FBDB380C7"}, {"criteria": "cpe:2.3:a:novell:iprint:4.30:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "3BDA0CD3-3E49-42E9-8D41-2B93FEE53610"}, {"criteria": "cpe:2.3:a:novell:iprint:4.32:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "AAB01661-76E1-4181-A798-6325EFD681FE"}, {"criteria": "cpe:2.3:a:novell:iprint:4.34:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "16769BC0-66AE-4AA3-B504-03389717A56D"}, {"criteria": "cpe:2.3:a:novell:iprint:4.36:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "25B2994C-8E01-4E7B-A5CA-9F9BE4C634C7"}, {"criteria": "cpe:2.3:a:novell:iprint:4.38:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "CCCA90D8-A320-43B0-A667-DAFC0D00924F"}], "operator": "OR"}]}], "sourceIdentifier": "PSIRT-CNA@flexerasoftware.com"}