CVE		CVE-2008-2436
Status		Candidate
Description		Multiple heap-based buffer overflows in the IppCreateServerRef function in nipplib.dll in Novell iPrint Client 4.x before 4.38 and 5.x before 5.08 allow remote attackers to execute arbitrary code via a long argument to the (1) GetPrinterURLList, (2) GetPrinterURLList2, or (3) GetFileList2 function in the Novell iPrint ActiveX control in ienipp.ocx.
Phase		Assigned (27.05.2008)
NVD:		http://nvd.nist.gov/nvd.cfm?cvename=CVE-2008-2436
References		BID : 30986
		BUGTRAQ : 20080903 Secunia Research: Novell iPrint Client nipplib.dll "IppCreateServerRef()" Buffer Overflow
		MISC : http://secunia.com/secunia_research/2008-33/advisory
		SECTRACK : 1020806
		SECUNIA : 31370
		SREASON : 4228
		VUPEN : ADV-2008-2481
		XF : novell-iprint-ippcreateserverref-bo(44853)