CVE-2008-2432
Novell iPrint < 5.04 - Exposure of Sensitive Information via GetFileList Method
Title source: llmDescription
Insecure method vulnerability in the GetFileList method in an unspecified ActiveX control in Novell iPrint Client before 5.06 allows remote attackers to list the image files in an arbitrary directory via a directory name in the argument.
References (3)
Core 3
Core References
Vendor Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/30667
Vendor Advisory x_refsource_misc
http://secunia.com/secunia_research/2008-30/advisory/
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/30813
Scores
EPSS
0.0086
EPSS Percentile
75.2%
Details
CWE
CWE-200
Status
published
Products (9)
novell/iprint
4.26
novell/iprint
4.27
novell/iprint
4.28
novell/iprint
4.30
novell/iprint
4.32
novell/iprint
4.34
novell/iprint
4.36
novell/iprint
4.38
novell/iprint
< 5.04
Published
Nov 26, 2008
Tracked Since
Feb 18, 2026