HP Printer Directory Traversal (CVE-2008-4419)

#%NASL_MIN_LEVEL 80900
##
# (C) Tenable, Inc.
##

include('compat.inc');

if (description)
{
  script_id(505344);
  script_version("1.3");
  script_set_attribute(attribute:"plugin_modification_date", value:"2026/05/26");

  script_cve_id("CVE-2008-4419");

  script_name(english:"HP Printer Directory Traversal (CVE-2008-4419)");

  script_set_attribute(attribute:"synopsis", value:
"The remote OT asset is affected by a vulnerability.");
  script_set_attribute(attribute:"description", value:
"Directory traversal vulnerability in the HP JetDirect web
administration interface in the HP-ChaiSOE 1.0 embedded web server on
the LaserJet 9040mfp, LaserJet 9050mfp, and Color LaserJet 9500mfp
before firmware 08.110.9; LaserJet 4345mfp and 9200C Digital Sender
before firmware 09.120.9; Color LaserJet 4730mfp before firmware
46.200.9; LaserJet 2410, LaserJet 2420, and LaserJet 2430 before
firmware 08.113.0; LaserJet 4250 and LaserJet 4350 before firmware
08.160.4; and LaserJet 9040 and LaserJet 9050 before firmware 08.112.0
allows remote attackers to read arbitrary files via directory
traversal sequences in the URI.

This plugin only works with Tenable.ot.
Please visit https://www.tenable.com/products/tenable-ot for more information.");
  script_set_attribute(attribute:"see_also", value:"https://seclists.org/bugtraq/2010/Apr/108");
  # https://support.hp.com/us-en/document/c01623905
  script_set_attribute(attribute:"see_also", value:"https://support.hp.com/us-en/document/c01623905");
  script_set_attribute(attribute:"solution", value:
"Refer to the vendor advisory.");
  script_set_cvss3_base_vector("CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N");
  script_set_cvss_base_vector("CVSS2#AV:N/AC:L/Au:N/C:C/I:N/A:N");
  script_set_cvss_temporal_vector("CVSS2#E:U/RL:OF/RC:C");
  script_set_attribute(attribute:"cvss_score_source", value:"CVE-2008-4419");

  script_set_attribute(attribute:"exploitability_ease", value:"No known exploits are available");
  script_set_attribute(attribute:"exploit_available", value:"false");
  script_cwe_id(22);

  script_set_attribute(attribute:"vuln_publication_date", value:"2009/02/05");
  script_set_attribute(attribute:"patch_publication_date", value:"2009/02/05");
  script_set_attribute(attribute:"plugin_publication_date", value:"2026/04/30");

  script_set_attribute(attribute:"plugin_type", value:"remote");
  script_set_attribute(attribute:"cpe", value:"cpe:/h:hp:9200c_digital_sender");
  script_set_attribute(attribute:"cpe", value:"cpe:/h:hp:color_laserjet_4730");
  script_set_attribute(attribute:"cpe", value:"cpe:/h:hp:color_laserjet_9500");
  script_set_attribute(attribute:"cpe", value:"cpe:/h:hp:laserjet_2410");
  script_set_attribute(attribute:"cpe", value:"cpe:/h:hp:laserjet_2420");
  script_set_attribute(attribute:"cpe", value:"cpe:/h:hp:laserjet_2430");
  script_set_attribute(attribute:"cpe", value:"cpe:/h:hp:laserjet_4250");
  script_set_attribute(attribute:"cpe", value:"cpe:/h:hp:laserjet_4345");
  script_set_attribute(attribute:"cpe", value:"cpe:/h:hp:laserjet_4350");
  script_set_attribute(attribute:"cpe", value:"cpe:/h:hp:laserjet_9040");
  script_set_attribute(attribute:"cpe", value:"cpe:/h:hp:laserjet_9050");
  script_set_attribute(attribute:"generated_plugin", value:"former");
  script_end_attributes();

  script_category(ACT_GATHER_INFO);
  script_family(english:"Tenable.ot");

  script_copyright(english:"This script is Copyright (C) 2026 and is owned by Tenable, Inc. or an Affiliate thereof.");

  script_dependencies("tenable_ot_api_integration.nasl");
  script_require_keys("Tenable.ot/HP");

  exit(0);
}


include('tenable_ot_cve_funcs.inc');

get_kb_item_or_exit('Tenable.ot/HP');

var asset = tenable_ot::assets::get(vendor:'HP');

var vuln_cpes = {
    "cpe:/h:hp:9200c_digital_sender" :
        {"versionEndExcluding" : "09.120.9", "family" : "LaserJet"},
    "cpe:/h:hp:color_laserjet_4730mfp" :
        {"versionEndExcluding" : "46.200.9", "family" : "LaserJet"},
    "cpe:/h:hp:color_laserjet_9500mfp" :
        {"versionEndExcluding" : "08.110.9", "family" : "LaserJet"},
    "cpe:/h:hp:laserjet_2410" :
        {"versionEndExcluding" : "08.113.0", "family" : "LaserJet"},
    "cpe:/h:hp:laserjet_2420" :
        {"versionEndExcluding" : "08.113.0", "family" : "LaserJet"},
    "cpe:/h:hp:laserjet_2430" :
        {"versionEndExcluding" : "08.113.0", "family" : "LaserJet"},
    "cpe:/h:hp:laserjet_4250" :
        {"versionEndExcluding" : "08.160.4", "family" : "LaserJet"},
    "cpe:/h:hp:laserjet_4345mfp" :
        {"versionEndExcluding" : "09.120.9", "family" : "LaserJet"},
    "cpe:/h:hp:laserjet_4350" :
        {"versionEndExcluding" : "08.160.4", "family" : "LaserJet"},
    "cpe:/h:hp:laserjet_9040" :
        {"versionEndExcluding" : "08.112.0", "family" : "LaserJet"},
    "cpe:/h:hp:laserjet_9040mfp" :
        {"versionEndExcluding" : "08.110.9", "family" : "LaserJet"},
    "cpe:/h:hp:laserjet_9050" :
        {"versionEndExcluding" : "08.112.0", "family" : "LaserJet"},
    "cpe:/h:hp:laserjet_9050mfp" :
        {"versionEndExcluding" : "08.110.9", "family" : "LaserJet"}
};

tenable_ot::cve::compare_and_report(asset:asset, cpes:vuln_cpes, severity:SECURITY_HOLE);