CVE-2010-3107: High severity Novell iPrint vulnerability
A certain ActiveX control in ienipp.ocx in the browser plugin in Novell iPrint Client before 5.42 does not properly restrict the set of files to be deleted, which allows remote attackers to cause a denial of service (recursive file deletion) via unspecified vectors related to a "logic flaw" in the CleanUploadFiles method in the nipplib.dll module.
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2010-3107?
The severity of CVE-2010-3107 is rated as high with a score of 7.1.
What type of vulnerability is identified in CVE-2010-3107?
CVE-2010-3107 is identified as a logic flaw in an ActiveX control that allows remote attackers to conduct a denial of service via recursive file deletion.
How do I fix CVE-2010-3107?
To fix CVE-2010-3107, upgrade to Novell iPrint Client version 5.42 or later.
Which versions of Novell iPrint are affected by CVE-2010-3107?
CVE-2010-3107 affects Novell iPrint Client versions prior to 5.42, including all versions from 4.26 to 5.40.
What is the risk associated with CVE-2010-3107?
The risk associated with CVE-2010-3107 involves potential denial of service due to unrestricted file deletion, which could impact system availability.