PT-2002-2518 · Hewlett Packard · Chaivm Ezloader

Published 2002-12-31 · Updated 2025-01-16 · CVE-2002-1796

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Medium

Base vector

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions ChaiVM EZloader for HP color LaserJet 4500 and 4550 and HP LaserJet 4100 and 8150 (affected versions not specified)

Description The issue is related to the improper verification of JAR signatures for new services in ChaiVM EZloader. This allows local users to load unauthorized Chai services.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Verification of Cryptographic Signature

Weakness Enumeration

CWE-347

Related Identifiers

CVE-2002-1796

Affected Products

Chaivm Ezloader

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2002-1796 · Security Note
• http://phenoelit.de/stuff/HP_Chai.txt · Vendor Advisory
• http://online.securityfocus.com/advisories/4317 · Vendor Advisory
• http://iss.net/security_center/static/9695.php · Note
• http://securityfocus.com/archive/1/284648 · Note
• http://securityfocus.com/bid/5334 · Note
• https://t.me/cvenotify/107686 · Telegram Post
• https://t.me/cvenotify/70660 · Telegram Post