PT-2004-2755 · Hewlett Packard · Hp Web Jetadmin

Wirepair · Published 2004-03-24 · Updated 2017-07-11 · CVE-2004-1856

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions HP Web JetAdmin version 7.5.2546

Description The issue allows remote attackers to upload arbitrary files to the printer directory when no password is set. This is related to the devices update printer fw upload.hts file in HP Web JetAdmin.

Recommendations For HP Web JetAdmin version 7.5.2546, set a password to prevent unauthorized access and restrict the ability to upload arbitrary files to the printer directory.

Exploit

Fix

Related Identifiers

CVE-2004-1856

Affected Products

Hp Web Jetadmin

References · 7

• 🔥 https://exploit-db.com/exploits/23878 · Exploit
• 🔥 http://sh0dan.org/files/hpjadmadv.txt · Exploit
• 🔥 http://securityfocus.com/bid/9971 · Exploit
• http://securityfocus.com/advisories/6492 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2004-1856 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/15605 · Note
• http://marc.info/?l=bugtraq&m=108016019623003&w=2 · Note