PT-2002-2519 · Hewlett Packard · Chaivm+5

Published 2002-12-31 · Updated 2008-09-05 · CVE-2002-1797

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Medium

Base vector

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions ChaiVM for HP color LaserJet versions 4500 and 4550 ChaiVM for HP LaserJet versions 4100 and 8150

Description The issue is related to improper enforcement of access control restrictions in ChaiVM, which could allow local users to add, delete, or modify services hosted by the ChaiServer.

Recommendations For ChaiVM on HP color LaserJet 4500 and 4550, restrict access to the ChaiServer to minimize the risk of exploitation. For ChaiVM on HP LaserJet 4100 and 8150, consider disabling the ChaiServer until a proper fix is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2002-1797

Affected Products

Chaiserver

Chaivm

Laserjet 4100

Laserjet 8150

Color Laserjet 4500

Color Laserjet 4550

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2002-1797 · Security Note
• http://phenoelit.de/stuff/HP_Chai.txt · Vendor Advisory
• http://securityfocus.com/bid/5332 · Note
• http://iss.net/security_center/static/9694.php · Note
• http://online.securityfocus.com/archive/1/284648 · Note