CVE-2011-3173
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
7.9 High
AI Score
Confidence
Low
0.296 Low
EPSS
Percentile
96.9%
Stack-based buffer overflow in the GetDriverSettings function in nipplib.dll in the iPrint client in Novell Open Enterprise Server 2 (aka OES2) SP3 allows remote attackers to execute arbitrary code via a long (1) hostname or (2) port field.
Affected configurations
| CPE | Name | Operator | Version |
|---|---|---|---|
| novell:iprint_open_enterprise_server_2 | novell iprint open enterprise server 2 | eq | * |
References
support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5117030.html
support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5117031.html
www.novell.com/support/viewContent.do?externalId=7009676
www.zerodayinitiative.com/advisories/ZDI-11-309/
bugzilla.novell.com/show_bug.cgi?id=707730
Related
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
7.9 High
AI Score
Confidence
Low
0.296 Low
EPSS
Percentile
96.9%