PT-2004-2755 · Hewlett Packard · Hp Web Jetadmin

Wirepair · Publicado 2004-03-24 · Atualizado 2017-07-11 · CVE-2004-1856

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions HP Web JetAdmin version 7.5.2546

Description The issue allows remote attackers to upload arbitrary files to the printer directory when no password is set. This is related to the devices update printer fw upload.hts file in HP Web JetAdmin.

Recommendations For HP Web JetAdmin version 7.5.2546, set a password to prevent unauthorized access and restrict the ability to upload arbitrary files to the printer directory.

Exploit

Correção

Identificadores relacionados

CVE-2004-1856

Produtos afetados

Hp Web Jetadmin

Referências · 7

• 🔥 https://exploit-db.com/exploits/23878 · Exploit
• 🔥 http://sh0dan.org/files/hpjadmadv.txt · Exploit
• 🔥 http://securityfocus.com/bid/9971 · Exploit
• https://exchange.xforce.ibmcloud.com/vulnerabilities/15605 · Nota
• http://securityfocus.com/advisories/6492 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2004-1856 · Nota de Segurança
• http://marc.info/?l=bugtraq&m=108016019623003&w=2 · Nota