CVE-2008-2432

2022-10-0316:14:03

CWE-200

flexera

web.nvd.nist.gov

cve-2008-2432

insecure method vulnerability

novell iprint client

activex control

remote attackers

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

AI Score

6.6

Confidence

Low

EPSS

0.028

Percentile

90.6%

JSON

Insecure method vulnerability in the GetFileList method in an unspecified ActiveX control in Novell iPrint Client before 5.06 allows remote attackers to list the image files in an arbitrary directory via a directory name in the argument.

Affected configurations

Nvd

Node

novelliprintRange≤5.04

novelliprintMatch4.26

novelliprintMatch4.27

novelliprintMatch4.28

novelliprintMatch4.30

novelliprintMatch4.32

novelliprintMatch4.34

novelliprintMatch4.36

novelliprintMatch4.38

VendorProductVersionCPE
novelliprint4.34cpe:/a:novell:iprint:4.34:::
novelliprint4.30cpe:/a:novell:iprint:4.30:::
novelliprint4.36cpe:/a:novell:iprint:4.36:::
novelliprintcpe:/a:novell:iprint::::
novelliprint4.38cpe:/a:novell:iprint:4.38:::
novelliprint4.28cpe:/a:novell:iprint:4.28:::
novelliprint4.26cpe:/a:novell:iprint:4.26:::
novelliprint4.27cpe:/a:novell:iprint:4.27:::
novelliprint4.32cpe:/a:novell:iprint:4.32:::

Vendor	Product	Version	CPE
novell	iprint	4.34	cpe:/a:novell:iprint:4.34:::
novell	iprint	4.30	cpe:/a:novell:iprint:4.30:::
novell	iprint	4.36	cpe:/a:novell:iprint:4.36:::
novell	iprint		cpe:/a:novell:iprint::::
novell	iprint	4.38	cpe:/a:novell:iprint:4.38:::
novell	iprint	4.28	cpe:/a:novell:iprint:4.28:::
novell	iprint	4.26	cpe:/a:novell:iprint:4.26:::
novell	iprint	4.27	cpe:/a:novell:iprint:4.27:::
novell	iprint	4.32	cpe:/a:novell:iprint:4.32:::