PT-2011-4874 · Hewlett Packard · Hp Managed Printing Administration

Andrea Micalizzi + 1 · Publicado 2011-12-22 · Atualizado 2019-10-09 · CVE-2011-4168

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions HP Managed Printing Administration versions prior to 2.6.4

Description The issue allows remote attackers to create arbitrary files via crafted form data, specifically through a directory traversal vulnerability in the hpmpa/jobDelivery/Default.asp file.

Recommendations For versions prior to 2.6.4, update to version 2.6.4 or later to resolve the issue.

Correção

Path traversal

Enumeração de Fraquezas

CWE-22

Identificadores relacionados

CVE-2011-4168

ZDI-11-354

Produtos afetados

Hp Managed Printing Administration

Referências · 4

• https://zerodayinitiative.com/advisories/ZDI-11-354 · Nota de Segurança
• http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03128469 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2011-4168 · Nota de Segurança
• http://zerodayinitiative.com/advisories/ZDI-11-354 · Nota