ID
VAR-200612-0799
TITLE
HP Printer FTP Print Server List Command Buffer Overflow Vulnerability
Trust: 0.3
sources:
BID: 21666
DESCRIPTION
-HP Printers running FTP Print Server are prone to a buffer-overflow vulnerability. This issue occurs because the application fails to boundscheck user-supplied data before copying it into an insufficiently sized buffer. An attacker can exploit this issue to execute arbitrary code within the context of the affected application. Failed exploit attempts will result in a denial of service.
Trust: 0.3
sources:
BID: 21666
AFFECTED PRODUCTS
vendor: | hp | model: | laserjet series | scope: | eq | version: | 5100 | Trust: 0.3 |
vendor: | hp | model: | laserjet series | scope: | eq | version: | 5000 | Trust: 0.3 |
vendor: | hp | model: | photo digital imaging hpqxml.dll | scope: | eq | version: | 2.0.0.133 | Trust: 0.3 |
vendor: | hp | model: | ftp print server | scope: | eq | version: | 2.4.5 | Trust: 0.3 |
sources:
BID: 21666
THREAT TYPE
network
Trust: 0.3
sources:
BID: 21666
TYPE
Boundary Condition Error
Trust: 0.3
sources:
BID: 21666
EXTERNAL IDS
db: | BID | id: | 21666 | Trust: 0.3 |
sources:
BID: 21666
REFERENCES
url: | http://www.hp.com | Trust: 0.3 |
url: | /archive/1/454817 | Trust: 0.3 |
sources:
BID: 21666
CREDITS
Joxean Koret is credited with the discovery of this vulnerability.
Trust: 0.3
sources:
BID: 21666
SOURCES
db: | BID | id: | 21666 |
LAST UPDATE DATE
2022-05-17T01:49:58.383000+00:00
SOURCES UPDATE DATE
db: | BID | id: | 21666 | date: | 2006-12-19T19:27:00 |
SOURCES RELEASE DATE
db: | BID | id: | 21666 | date: | 2006-12-19T00:00:00 |