[SEC-1 LTD] HP Colour LaserJet 2500 and 4600 Toolbox Directory Traversal Vulnerability

SEC-1 LTD www.sec-1.com Security Advisory Advisory Name: HP Colour LaserJet 2500 and 4600 Toolbox Directory Traversal Vulnerability Release Date: 04/04/2006 Application: HP Colour LaserJet 2500 and 4600 Toolbox Platform: Microsoft Windows all supported versions Severity: Remote Arbitrary File...

HP Color LaserJet 2500 / HP Color LaserJet 4600 drivers information leak

Directory traversal in integrated HTTP server TCP/5225...

[security bulletin] HPSBPI2109 SSRT061141 rev.1 - HP Color LaserJet 2500 and 4600 Toolbox Running on Microsoft Windows Remote Unauthorized Disclosure of Information

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c00634759 Version: 1 HPSBPI2109 SSRT061141 rev.1 - HP Color LaserJet 2500 and 4600 Toolbox Running on Microsoft Windows Remote Unauthorized Disclosure of Information NOTICE: The information in thi...

HP Color LaserJet 25004600 Toolbox - Directory Traversal

HP Color LaserJet 25004600 Toolbox - Directory Traversal source: https://www.securityfocus.com/bid/17367/info The HP Color LaserJet 2500/4600 Toolbox is prone to a directory-traversal vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An...

HP Color LaserJet 2500/4600 Toolbox - Directory Traversal

source: https://www.securityfocus.com/bid/17367/info The HP Color LaserJet 2500/4600 Toolbox is prone to a directory-traversal vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker can exploit this vulnerability to retrieve arbitrar...

HPSBPI2109 SSRT061141 rev.2 - HP Color LaserJet 2500 and 4600 Toolbox Running on Microsoft Windows Remote Unauthorized Disclosure of Information

Potential Security Impact Remote unauthorized disclosure of information VULNERABILITY SUMMARY A potential security vulnerability has been identified in the HP Color LaserJet 2500 and 4600 Toolbox, which may allow an unauthorized remote attacker to read arbitrary files. RESOLUTION HP has provided...

PTL_advisory_050825.txt

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ================================================================= P . T . L . P I N I O N S T E K N I S K A L A B O R A T O R I U M The Pinion Technical Laboratory http://www.pinion.se Advisory...

CVE-2005-2988

HP LaserJet 2430, and possibly other printers that use Jetdirect controls, stores information about recently printed documents without proper protection, which could allow remote attackers to obtain sensitive information via SNMP...

CVE-2005-2988

The records indicate CVE-2005-2988 affects HP LaserJet 2430 and other printers using Jetdirect controls. The issue is that recently printed documents are stored without proper protection, enabling potential disclosure of sensitive information over SNMP. The impact is described as PARTIAL confiden...

CVE-2005-2988

HP LaserJet 2430, and possibly other printers that use Jetdirect controls, stores information about recently printed documents without proper protection, which could allow remote attackers to obtain sensitive information via SNMP...

CVE-2005-2988: Undefined Security Weakness

HP LaserJet 2430, and possibly other printers that use Jetdirect controls, stores information about recently printed documents without proper protection, which could allow remote attackers to obtain sensitive information via SNMP...

CVE-2004-2439

CVE-2004-2439 concerns the remote upgrade capability in HP LaserJet 4200 and 4300 printers, described as not requiring a password and allowing remote firmware upgrades. The affected component is the printer firmware upgrade mechanism. Per HP guidance, a practical remediation is to disable remote ...

CVE-2004-2439

The remote upgrade capability in HP LaserJet 4200 and 4300 printers does not require a password, which allows remote attackers to upgrade firmware...

CVE-2004-2439: Undefined Security Weakness

The remote upgrade capability in HP LaserJet 4200 and 4300 printers does not require a password, which allows remote attackers to upgrade firmware...

CVE-2002-1797

ChaiVM for HP color LaserJet 4500 and 4550 or HP LaserJet 4100 and 8150 does not properly enforce access control restrictions, which could allow local users to add, delete, or modify any services hosted by the ChaiServer...

CVE-2002-1796

The CVE-2002-1796 issue affects ChaiVM EZloader for HP Color LaserJet 4500/4550 and HP LaserJet 4100/8150, where JAR signatures are not properly verified for new services. This allows local users to load unauthorized Chai services via the EZloader component. The vulnerability is documented across...

CVE-2002-1797

CVE-2002-1797 concerns ChaiVM on HP color LaserJet 4500/4550 and HP LaserJet 4100/8150. The issue, as described, is improper enforcement of access control, which could allow local users to add, delete, or modify any services hosted by the ChaiServer. The NVD entry lists a medium impact with parti...

CVE-2002-1796: Improper Verification of Cryptographic Signature

ChaiVM EZloader for HP color LaserJet 4500 and 4550 and HP LaserJet 4100 and 8150 does not properly verify JAR signatures for new services, which allows local users to load unauthorized Chai services...

CVE-2004-2439

The remote upgrade capability in HP LaserJet 4200 and 4300 printers does not require a password, which allows remote attackers to upgrade firmware...

CVE-2002-1797

ChaiVM for HP color LaserJet 4500 and 4550 or HP LaserJet 4100 and 8150 does not properly enforce access control restrictions, which could allow local users to add, delete, or modify any services hosted by the ChaiServer...