CVE-2006-1654

Directory traversal vulnerability in the HP Color LaserJet 2500 Toolbox and Color LaserJet 4600 Toolbox on Microsoft Windows before 20060402 allows remote attackers to read arbitrary files via a .. dot dot in an HTTP GET request to TCP port 5225...

HP Color LaserJet 2500 / HP Color LaserJet 4600 drivers information leak

Directory traversal in integrated HTTP server TCP/5225...

[SEC-1 LTD] HP Colour LaserJet 2500 and 4600 Toolbox Directory Traversal Vulnerability

SEC-1 LTD www.sec-1.com Security Advisory Advisory Name: HP Colour LaserJet 2500 and 4600 Toolbox Directory Traversal Vulnerability Release Date: 04/04/2006 Application: HP Colour LaserJet 2500 and 4600 Toolbox Platform: Microsoft Windows all supported versions Severity: Remote Arbitrary File...

[security bulletin] HPSBPI2109 SSRT061141 rev.1 - HP Color LaserJet 2500 and 4600 Toolbox Running on Microsoft Windows Remote Unauthorized Disclosure of Information

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c00634759 Version: 1 HPSBPI2109 SSRT061141 rev.1 - HP Color LaserJet 2500 and 4600 Toolbox Running on Microsoft Windows Remote Unauthorized Disclosure of Information NOTICE: The information in thi...

HP Color LaserJet 25004600 Toolbox - Directory Traversal

HP Color LaserJet 25004600 Toolbox - Directory Traversal source: https://www.securityfocus.com/bid/17367/info The HP Color LaserJet 2500/4600 Toolbox is prone to a directory-traversal vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An...

HP Color LaserJet 2500/4600 Toolbox - Directory Traversal

source: https://www.securityfocus.com/bid/17367/info The HP Color LaserJet 2500/4600 Toolbox is prone to a directory-traversal vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker can exploit this vulnerability to retrieve arbitrar...

HPSBPI2109 SSRT061141 rev.2 - HP Color LaserJet 2500 and 4600 Toolbox Running on Microsoft Windows Remote Unauthorized Disclosure of Information

Potential Security Impact Remote unauthorized disclosure of information VULNERABILITY SUMMARY A potential security vulnerability has been identified in the HP Color LaserJet 2500 and 4600 Toolbox, which may allow an unauthorized remote attacker to read arbitrary files. RESOLUTION HP has provided...

PTL_advisory_050825.txt

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ================================================================= P . T . L . P I N I O N S T E K N I S K A L A B O R A T O R I U M The Pinion Technical Laboratory http://www.pinion.se Advisory...

CVE-2005-2988

HP LaserJet 2430, and possibly other printers that use Jetdirect controls, stores information about recently printed documents without proper protection, which could allow remote attackers to obtain sensitive information via SNMP...

CVE-2005-2988

The records indicate CVE-2005-2988 affects HP LaserJet 2430 and other printers using Jetdirect controls. The issue is that recently printed documents are stored without proper protection, enabling potential disclosure of sensitive information over SNMP. The impact is described as PARTIAL confiden...

CVE-2005-2988

HP LaserJet 2430, and possibly other printers that use Jetdirect controls, stores information about recently printed documents without proper protection, which could allow remote attackers to obtain sensitive information via SNMP...

CVE-2004-2439

The remote upgrade capability in HP LaserJet 4200 and 4300 printers does not require a password, which allows remote attackers to upgrade firmware...

CVE-2004-2439

CVE-2004-2439 concerns the remote upgrade capability in HP LaserJet 4200 and 4300 printers, described as not requiring a password and allowing remote firmware upgrades. The affected component is the printer firmware upgrade mechanism. Per HP guidance, a practical remediation is to disable remote ...

CVE-2002-1797

ChaiVM for HP color LaserJet 4500 and 4550 or HP LaserJet 4100 and 8150 does not properly enforce access control restrictions, which could allow local users to add, delete, or modify any services hosted by the ChaiServer...

CVE-2002-1796

The CVE-2002-1796 issue affects ChaiVM EZloader for HP Color LaserJet 4500/4550 and HP LaserJet 4100/8150, where JAR signatures are not properly verified for new services. This allows local users to load unauthorized Chai services via the EZloader component. The vulnerability is documented across...

CVE-2002-1797

CVE-2002-1797 concerns ChaiVM on HP color LaserJet 4500/4550 and HP LaserJet 4100/8150. The issue, as described, is improper enforcement of access control, which could allow local users to add, delete, or modify any services hosted by the ChaiServer. The NVD entry lists a medium impact with parti...

CVE-2004-2439

The remote upgrade capability in HP LaserJet 4200 and 4300 printers does not require a password, which allows remote attackers to upgrade firmware...

CVE-2002-1797

ChaiVM for HP color LaserJet 4500 and 4550 or HP LaserJet 4100 and 8150 does not properly enforce access control restrictions, which could allow local users to add, delete, or modify any services hosted by the ChaiServer...

PT-2002-2518 · Hewlett Packard · Chaivm Ezloader

Name of the Vulnerable Software and Affected Versions: ChaiVM EZloader for HP color LaserJet 4500 and 4550 and HP LaserJet 4100 and 8150 affected versions not specified Description: The issue is related to the improper verification of JAR signatures for new services in ChaiVM EZloader. This allow...

CVE-2001-1040

CVE-2001-1040 affects HP LaserJet and possibly other JetDirect devices, where certain power-off behavior resets the admin password. The result is that a remote attacker could gain administrative access without a password after the device is turned off, per the available description. The provided ...