« Volver al listado

CVE-2008-2432

Estado: ModificadaMedia (5)—

Insecure method vulnerability in the GetFileList method in an unspecified ActiveX control in Novell iPrint Client before 5.06 allows remote attackers to list the image files in an arbitrary directory via a directory name in the argument.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Novell — Iprint

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2008-2432",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 5,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N",
          "authentication": "NONE",
          "integrityImpact": "NONE",
          "accessComplexity": "LOW",
          "availabilityImpact": "NONE",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 2.9,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "PSIRT-CNA@flexerasoftware.com",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2008-11-26T01:30:00.390",
  "references": [
    {
      "url": "http://secunia.com/advisories/30667",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "PSIRT-CNA@flexerasoftware.com"
    },
    {
      "url": "http://secunia.com/secunia_research/2008-30/advisory/",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "PSIRT-CNA@flexerasoftware.com"
    },
    {
      "url": "http://www.securityfocus.com/bid/30813",
      "source": "PSIRT-CNA@flexerasoftware.com"
    },
    {
      "url": "http://secunia.com/advisories/30667",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://secunia.com/secunia_research/2008-30/advisory/",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/bid/30813",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-200"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Insecure method vulnerability in the GetFileList method in an unspecified ActiveX control in Novell iPrint Client before 5.06 allows remote attackers to list the image files in an arbitrary directory via a directory name in the argument."
    },
    {
      "lang": "es",
      "value": "Vulnerabilidad de método inseguro en el método GetFileList en un control ActiveX no especificado en Novell iPrint Client anterior a v5.06 permite a atacantes remotos listar los archivos de imagen en un directorio de su elección mediante un nombre de directorio en el argumento."
    }
  ],
  "lastModified": "2026-06-16T22:53:46.320",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:novell:iprint:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A5538B39-4C1E-42AE-9B93-6203C77A9C91",
              "versionEndIncluding": "5.04"
            },
            {
              "criteria": "cpe:2.3:a:novell:iprint:4.26:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "3332CB43-D2ED-4720-8ED4-AE222C6F7FF3"
            },
            {
              "criteria": "cpe:2.3:a:novell:iprint:4.27:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "E9AD9057-2218-481E-96CB-BF568AD3A9F2"
            },
            {
              "criteria": "cpe:2.3:a:novell:iprint:4.28:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "0D044326-00CB-4158-A652-7D7FBDB380C7"
            },
            {
              "criteria": "cpe:2.3:a:novell:iprint:4.30:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "3BDA0CD3-3E49-42E9-8D41-2B93FEE53610"
            },
            {
              "criteria": "cpe:2.3:a:novell:iprint:4.32:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "AAB01661-76E1-4181-A798-6325EFD681FE"
            },
            {
              "criteria": "cpe:2.3:a:novell:iprint:4.34:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "16769BC0-66AE-4AA3-B504-03389717A56D"
            },
            {
              "criteria": "cpe:2.3:a:novell:iprint:4.36:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "25B2994C-8E01-4E7B-A5CA-9F9BE4C634C7"
            },
            {
              "criteria": "cpe:2.3:a:novell:iprint:4.38:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "CCCA90D8-A320-43B0-A667-DAFC0D00924F"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "PSIRT-CNA@flexerasoftware.com"
}