VulnerabilityModified

CVE-2010-4328

Multiple stack-based buffer overflows in opt/novell/iprint/bin/ipsmd in Novell iPrint for Linux Open Enterprise Server 2 SP2 and SP3 allow remote attackers to execute arbitrary code via unspecified LPR opcodes.

HIGH 7.5EPSS 15.2%

Does this matter?

EPSS puts the probability of exploitation in the next 30 days at 15.2%, higher than 97% of all known CVEs. Patch or mitigate before the next change window.

Description

CVSS 2.0: 7.5 HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P
EPSS: 15.20% probability · 97th percentile
CISA KEV: Not listed
Weakness: CWE-119
Affected: novell/iprint open enterprise server
Source: cve@mitre.org

References

http://download.novell.com/Download?buildid=KloKR_CmrBs~
http://osvdb.org/70852
http://secunia.com/advisories/43281Vendor Advisory
http://securityreason.com/securityalert/8096
http://www.novell.com/support/viewContent.do?externalId=7007858&sliceId=1Vendor Advisory
http://www.securityfocus.com/archive/1/516506/100/0/threaded
http://www.securityfocus.com/bid/46309
http://www.securitytracker.com/id?1025074
http://www.vupen.com/english/advisories/2011/0353Vendor Advisory
http://www.zerodayinitiative.com/advisories/ZDI-11-087
http://download.novell.com/Download?buildid=KloKR_CmrBs~
http://osvdb.org/70852
http://secunia.com/advisories/43281Vendor Advisory
http://securityreason.com/securityalert/8096
http://www.novell.com/support/viewContent.do?externalId=7007858&sliceId=1Vendor Advisory
http://www.securityfocus.com/archive/1/516506/100/0/threaded
http://www.securityfocus.com/bid/46309
http://www.securitytracker.com/id?1025074
http://www.vupen.com/english/advisories/2011/0353Vendor Advisory
http://www.zerodayinitiative.com/advisories/ZDI-11-087

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.