ID

VAR-200612-0799


TITLE

HP Printer FTP Print Server List Command Buffer Overflow Vulnerability

Trust: 0.3

sources: BID: 21666

DESCRIPTION

-HP Printers running FTP Print Server are prone to a buffer-overflow vulnerability. This issue occurs because the application fails to boundscheck user-supplied data before copying it into an insufficiently sized buffer. An attacker can exploit this issue to execute arbitrary code within the context of the affected application. Failed exploit attempts will result in a denial of service.

Trust: 0.3

sources: BID: 21666

AFFECTED PRODUCTS

vendor:hpmodel:laserjet seriesscope:eqversion:5100

Trust: 0.3

vendor:hpmodel:laserjet seriesscope:eqversion:5000

Trust: 0.3

vendor:hpmodel:photo digital imaging hpqxml.dllscope:eqversion:2.0.0.133

Trust: 0.3

vendor:hpmodel:ftp print serverscope:eqversion:2.4.5

Trust: 0.3

sources: BID: 21666

THREAT TYPE

network

Trust: 0.3

sources: BID: 21666

TYPE

Boundary Condition Error

Trust: 0.3

sources: BID: 21666

EXTERNAL IDS

db:BIDid:21666

Trust: 0.3

sources: BID: 21666

REFERENCES

url:http://www.hp.com

Trust: 0.3

url:/archive/1/454817

Trust: 0.3

sources: BID: 21666

CREDITS

Joxean Koret is credited with the discovery of this vulnerability.

Trust: 0.3

sources: BID: 21666

SOURCES

db:BIDid:21666

LAST UPDATE DATE

2022-05-17T01:49:58.383000+00:00


SOURCES UPDATE DATE

db:BIDid:21666date:2006-12-19T19:27:00

SOURCES RELEASE DATE

db:BIDid:21666date:2006-12-19T00:00:00