CVE-2006-6742
Summary
| CVE | CVE-2006-6742 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2006-12-26 23:28:00 UTC |
| Updated | 2018-10-17 21:49:00 UTC |
| Description | Multiple buffer overflows in FTP Print Server 2.4 and 2.4.5 in HP LaserJet 5000 Series printers with firmware R.25.15 or R.25.47, and HP LaserJet 5100 Series printers with firmware V.29.12, allow remote attackers to cause a denial of service (device crash) via a long string in the (1) LIST or (2) NLST command. |
Risk And Classification
Problem Types: NVD-CWE-Other
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Hp | Ftp Print Server | 2.4 | All | All | All |
| Application | Hp | Ftp Print Server | 2.4.5 | All | All | All |
| Application | Hp | Ftp Print Server | 2.4 | All | All | All |
| Application | Hp | Ftp Print Server | 2.4.5 | All | All | All |
| Hardware | Hp | Laserjet 5000 | r.25.15 | All | All | All |
| Hardware | Hp | Laserjet 5000 | r.25.47 | All | All | All |
| Hardware | Hp | Laserjet 5000 | r.25.15 | All | All | All |
| Hardware | Hp | Laserjet 5000 | r.25.47 | All | All | All |
| Hardware | Hp | Laserjet 5100 | v.29.12 | All | All | All |
| Hardware | Hp | Laserjet 5100 | v.29.12 | All | All | All |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| HP FTP Print Server LIST Denial of Service Vulnerability - Advisories - Secunia | SECUNIA | secunia.com | |
| SecurityFocus | BUGTRAQ | www.securityfocus.com | |
| Webmail : Solution de messagerie professionnelle - OVHcloud- OVH | VUPEN | www.vupen.com | |
| HP Printers FTP Server Denial Of Service - CXSecurity.com | SREASON | securityreason.com | |
| [Full-disclosure] HP Printers FTP Server Denial Of Service | FULLDISC | lists.grok.org.uk | |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.