CVE-2008-2432

Insecure method vulnerability in the GetFileList method in an unspecified ActiveX control in Novell iPrint Client before 5.06 allows remote attackers to list the image files in an arbitrary directory via a directory name in the argument.

Score

CVSS 2.0 5.0 Medium

Status

Modified - PSIRT-CNA@flexerasoftware.com

Published

2008-11-26

Last modified

2024-09-17

Weaknesses

CWE-200

Affected products

• Iprint (Novell)

References

• http://secunia.com/advisories/30667
• http://secunia.com/secunia_research/2008-30/advisory/
• http://www.securityfocus.com/bid/30813