PT-2002-2519 · Hewlett Packard · Chaivm+5

Publicado 2002-12-31 · Atualizado 2008-09-05 · CVE-2002-1797

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Média

Vetor base

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions ChaiVM for HP color LaserJet versions 4500 and 4550 ChaiVM for HP LaserJet versions 4100 and 8150

Description The issue is related to improper enforcement of access control restrictions in ChaiVM, which could allow local users to add, delete, or modify services hosted by the ChaiServer.

Recommendations For ChaiVM on HP color LaserJet 4500 and 4550, restrict access to the ChaiServer to minimize the risk of exploitation. For ChaiVM on HP LaserJet 4100 and 8150, consider disabling the ChaiServer until a proper fix is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

CVE-2002-1797

Produtos afetados

Chaiserver

Chaivm

Laserjet 4100

Laserjet 8150

Color Laserjet 4500

Color Laserjet 4550

Referências · 5

• http://securityfocus.com/bid/5332 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2002-1797 · Nota de Segurança
• http://iss.net/security_center/static/9694.php · Nota
• http://phenoelit.de/stuff/HP_Chai.txt · Aviso do Fabricante
• http://online.securityfocus.com/archive/1/284648 · Nota