CVE-2008-2432

Опубликовано: 26 нояб. 2008

Источник: nvd

CVSS2: 5

EPSS Низкий

Описание

Insecure method vulnerability in the GetFileList method in an unspecified ActiveX control in Novell iPrint Client before 5.06 allows remote attackers to list the image files in an arbitrary directory via a directory name in the argument.

Ссылки

http://secunia.com/advisories/30667
Vendor Advisory
http://secunia.com/secunia_research/2008-30/advisory/
Vendor Advisory
http://www.securityfocus.com/bid/30813
http://secunia.com/advisories/30667
Vendor Advisory
http://secunia.com/secunia_research/2008-30/advisory/
Vendor Advisory
http://www.securityfocus.com/bid/30813

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:novell:iprint:*:*:*:*:*:*:*:*

Версия до 5.04 (включая)

cpe:2.3:a:novell:iprint:4.26:*:*:*:*:*:*:*

cpe:2.3:a:novell:iprint:4.27:*:*:*:*:*:*:*

cpe:2.3:a:novell:iprint:4.28:*:*:*:*:*:*:*

cpe:2.3:a:novell:iprint:4.30:*:*:*:*:*:*:*

cpe:2.3:a:novell:iprint:4.32:*:*:*:*:*:*:*

cpe:2.3:a:novell:iprint:4.34:*:*:*:*:*:*:*

cpe:2.3:a:novell:iprint:4.36:*:*:*:*:*:*:*

cpe:2.3:a:novell:iprint:4.38:*:*:*:*:*:*:*

EPSS

Процентиль: 75%

0.00858

Низкий

5 Medium

CVSS2

Дефекты

CWE-200

Связанные уязвимости

GHSA-2hr2-h6cw-gfqc

github

почти 4 года назад