PT-2011-4874 · Hewlett Packard · Hp Managed Printing Administration

Andrea Micalizzi + 1 · Published 2011-12-22 · Updated 2019-10-09 · CVE-2011-4168

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions HP Managed Printing Administration versions prior to 2.6.4

Description The issue allows remote attackers to create arbitrary files via crafted form data, specifically through a directory traversal vulnerability in the hpmpa/jobDelivery/Default.asp file.

Recommendations For versions prior to 2.6.4, update to version 2.6.4 or later to resolve the issue.

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2011-4168

ZDI-11-354

Affected Products

Hp Managed Printing Administration

References · 4

• https://zerodayinitiative.com/advisories/ZDI-11-354 · Security Note
• http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03128469 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2011-4168 · Security Note
• http://zerodayinitiative.com/advisories/ZDI-11-354 · Note