CVE-2010-3107
First published: Mon Aug 23 2010(Updated: )
A certain ActiveX control in ienipp.ocx in the browser plugin in Novell iPrint Client before 5.42 does not properly restrict the set of files to be deleted, which allows remote attackers to cause a denial of service (recursive file deletion) via unspecified vectors related to a "logic flaw" in the CleanUploadFiles method in the nipplib.dll module.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Novell Iprint | <=5.40 | |
| Novell Iprint | =4.26 | |
| Novell Iprint | =4.27 | |
| Novell Iprint | =4.28 | |
| Novell Iprint | =4.30 | |
| Novell Iprint | =4.32 | |
| Novell Iprint | =4.34 | |
| Novell Iprint | =4.36 | |
| Novell Iprint | =4.38 | |
| Novell Iprint | =5.04 | |
| Novell Iprint | =5.12 | |
| Novell Iprint | =5.20b | |
| Novell Iprint | =5.30 | |
| Novell Iprint | =5.32 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2010-3107?
The severity of CVE-2010-3107 is rated as high with a score of 7.1.
What type of vulnerability is identified in CVE-2010-3107?
CVE-2010-3107 is identified as a logic flaw in an ActiveX control that allows remote attackers to conduct a denial of service via recursive file deletion.
How do I fix CVE-2010-3107?
To fix CVE-2010-3107, upgrade to Novell iPrint Client version 5.42 or later.
Which versions of Novell iPrint are affected by CVE-2010-3107?
CVE-2010-3107 affects Novell iPrint Client versions prior to 5.42, including all versions from 4.26 to 5.40.
What is the risk associated with CVE-2010-3107?
The risk associated with CVE-2010-3107 involves potential denial of service due to unrestricted file deletion, which could impact system availability.
- collector/nvd-index
- collector/nvd-historical
- vendor/novell
- product/iprint
- canonical/novell iprint