CVE-2008-2908
published 2008-06-30CVE-2008-2908: Multiple stack-based buffer overflows in a certain ActiveX control in ienipp.ocx in Novell iPrint Client for Windows before 4.36 allow remote attackers to…
PriorityP354critical9.3CVSS 2.0
AVNACMAuNCCICAC
EXPLOIT
EPSS
35.42%
98.3th percentile
Multiple stack-based buffer overflows in a certain ActiveX control in ienipp.ocx in Novell iPrint Client for Windows before 4.36 allow remote attackers to execute arbitrary code via a long value of the (1) operation, (2) printer-url, or (3) target-frame parameter. NOTE: some of these details are obtained from third party information.
Affected
1 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| novell | iprint_client | <= 4.35 | — |
Detection & IOCsextracted from sources · hover to see the quote
- ·The Metasploit module targets specifically Novell iPrint Client version 4.34; the vulnerability affects all versions before 4.36. The fixed version is 4.36 or later. ↗
- ·The module sets EXITFUNC to 'process', meaning the exploit terminates the browser process on exit rather than using a thread-safe exit — detections based on abnormal iexplore.exe termination may be relevant. ↗
- ·JavaScript variable names in the exploit HTML are randomized, limiting static string-based detection of the malicious page. ↗
CVEs like this are exactly what “Exploited This Week” covers.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
No detection rules found.
Exploit-DB
Maxum Rumpus 6.0 - Multiple Remote Buffer Overflow Vulnerabilities
exploitdb·2008-12-01
CVE-2008-7078 Maxum Rumpus 6.0 - Multiple Remote Buffer Overflow Vulnerabilities
Maxum Rumpus 6.0 - Multiple Remote Buffer Overflow Vulnerabilities
---
BLUE MOON SECURITY ADVISORY 2008-09
:Title: Two buffer overflows in Maxum Rumpus
:Severity: Critical
:Reporter: Blue Moon Consulting
:Products: Maxum Rumpus v6.0
:Fixed in: 6.0.1
Description
Rumpus turns any Mac into a file transfer server.
Rumpus v6.0 contains two buffer overflow vulnerabilities in its HTTP and FTP modules.
The first allows an unauthenticated user to crash Rumpus. The later may result in arbitrary
code execution under superuser privilege.
The overflow in HTTP component is caused by the lack of boundary check when parsing for HTTP
action verb (GET, POST, PUT, etc.). If the verb is exactly 2908-byte long, the server runs into
a segmentation fault and crashes. A manual restart is required. It has
Exploit-DB
Novell iPrint Client - ActiveX Control Buffer Overflow (Metasploit)
exploitdb·2008-06-16
CVE-2008-2908 Novell iPrint Client - ActiveX Control Buffer Overflow (Metasploit)
Novell iPrint Client - ActiveX Control Buffer Overflow (Metasploit)
---
##
# $Id: novelliprint_getdriversettings.rb$
##
###
# This file is part of the Metasploit Framework and may be subject to
# redistribution and commercial restrictions. Please see the Metasploit
# Framework web site for more information on licensing and terms of use.
# http://metasploit.com/framework/
##
require 'msf/core'
class Metasploit3 'Novell iPrint Client ActiveX Control Buffer Overflow',
'Description' => %q{
This module exploits a stack buffer overflow in Novell iPrint Client 4.34. When
sending an overly long string to the GetDriverSettings() property of ienipp.ocx
an attacker may be able to execute arbitrary code.
},
'License' => MSF_LICENSE,
'Author' => [ 'MC' ],
'Version' => '$Revision: 10394 $',
'Refer
Metasploit
Novell iPrint Client ActiveX Control Buffer Overflow
metasploit
Novell iPrint Client ActiveX Control Buffer Overflow
Novell iPrint Client ActiveX Control Buffer Overflow
This module exploits a stack buffer overflow in Novell iPrint Client 4.34. When sending an overly long string to the GetDriverSettings() property of ienipp.ocx an attacker may be able to execute arbitrary code.
No writeups or analysis indexed.
http://secunia.com/advisories/30709http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5028061.htmlhttp://www.kb.cert.org/vuls/id/145313http://www.securityfocus.com/bid/29736http://www.securitytracker.com/id?1020303http://www.vupen.com/english/advisories/2008/1837/referenceshttps://exchange.xforce.ibmcloud.com/vulnerabilities/43085http://secunia.com/advisories/30709http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5028061.htmlhttp://www.kb.cert.org/vuls/id/145313http://www.securityfocus.com/bid/29736http://www.securitytracker.com/id?1020303http://www.vupen.com/english/advisories/2008/1837/referenceshttps://exchange.xforce.ibmcloud.com/vulnerabilities/43085
2008-06-30
Published