This is a record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities. Necessarily indicate when this vulnerability wasĭiscovered, shared with the affected vendor, publicly The CVE ID was allocated or reserved, and does not XF:novell-iprint-iprintclientconfiginfo-bo(67881)ĭisclaimer: The record creation date may reflect when.BUGTRAQ:20110606 ZDI-11-179: Novell iPrint nipplib.dll iprint-client-config-info Remote Code Execution Vulnerability.Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities.
Responses are currently closed, but you can trackback from your own site.Stack-based buffer overflow in nipplib.dll in Novell iPrint Client before 5.64 allows remote attackers to execute arbitrary code via a crafted iprint-client-config-info parameter in a printer-url. You can follow any responses to this entry through the RSS 2.0 feed. On Monday, November 16th, 2009 at 2:26 pm and is filed under Uncategorized. without re-adding those printing fails with client-error-document-format-not-supported.įilter application/vnd.cups-command 0 commandtopsįilter application/vnd.cups-postscript 0. Some upgrade changed my nf removing several lines from each printer. I created a patch for CUPS which (re-?) adds this to the valid_host function and now it works again.Ĭopy the patch into the debian/patches subdir of an extracted cups 1.4.x source package, add it to debian/patches/00list (preferably on top) and rebuild your debian package. The Novell iprint binary connects with “/var/run/cups/cups.sock” set as hostname and therfore fails. They are restricted to some versions of “localhost”. After lot of strace, ltrace and log file reading I found the function valid_host in CUPS sources, which checks names allowed to connect via loopback. Specifically, iPrint client software downloads a zipped file containing this driver from the NDPS Print Manager running on the same server as the requested printer. Karmic comes with CUPS in version 1.4.x, the latest SLED (11) still delivers an rather old iprint rpm dated Oct 2008 and has CUPS 1.3.9. After iPrint verifies that the client software is installed, the iPrint client software downloads and installs the driver for the requested printer.
Today I succeded in fixing my novell iprint client setup on Karmic, it was previously running on Ubuntu Hardy, but stopped working after the upgrade.
0 kommentar(er)
