Multiple HP JetDirect Printers Multiple Cross Site Scripting Vulnerabilities
BID:36613
Info
Multiple HP JetDirect Printers Multiple Cross Site Scripting Vulnerabilities
| Bugtraq ID: | 36613 |
| Class: | Input Validation Error |
| CVE: |
CVE-2009-2684 |
| Remote: | Yes |
| Local: | No |
| Published: | Oct 07 2009 12:00AM |
| Updated: | Oct 07 2009 10:19PM |
| Credit: | Digital Security Research Group |
| Vulnerable: |
HP LaserJet P4515 0 HP LaserJet P4015 0 HP LaserJet P4014 0 HP LaserJet P3005n 0 HP LaserJet M9050 MFP 0 HP LaserJet M9040 0 HP LaserJet M5025 0 HP LaserJet M4345x MFP 0 HP LaserJet M3027 0 HP LaserJet 9050n 0 HP LaserJet 9050 MFP 0 HP LaserJet 9040n 0 HP LaserJet 9040 0 HP LaserJet 9040 0 HP LaserJet 5200n 0 HP LaserJet 5035 MFP 0 HP LaserJet 4350n 0 HP LaserJet 4345 MFP 0 HP LaserJet 4250n 0 HP LaserJet 4240 0 HP LaserJet 3035 MFP 0 HP LaserJet 2430n 0 HP LaserJet 2420 0 HP LaserJet 2420 0 HP LaserJet 2410 0 HP LaserJet 2410 0 HP JetDirect J8006E V.36.35 HP JetDirect J8004E V.36.35 HP JetDirect J8003E V.36.35 HP JetDirect J7993E V.36.35 HP JetDirect J7992E V.34.12 HP JetDirect J7991E V.34.60 HP JetDirect J7990E V.33.41 HP JetDirect J7987E V.34.60 HP JetDirect J7982E V.34.08 HP JetDirect J7979E V.33.55 HP JetDirect J7974E V.34.40 HP JetDirect J7973E V.30.31 HP JetDirect J7949E V.28.XX HP DS9250c Digital Sender 0 HP DS9200c Digital Sender 0 HP Color LaserJet CP6015 0 HP Color LaserJet CP4005n 0 HP Color LaserJet CP3505 0 HP Color LaserJet CM4730 MFP 0 HP Color LaserJet 6040 MFP 0 HP Color LaserJet 4730mfp 0 HP Color LaserJet 4730 MFP 0 HP Color LaserJet 4700n 0 HP Color LaserJet 3800n 0 HP Color LaserJet 3600n 0 HP Color LaserJet 3000n 0 HP CM8050 0 HP 8060 MFP 0 |
| Not Vulnerable: | |
Discussion
Multiple HP JetDirect Printers Multiple Cross Site Scripting Vulnerabilities
Multiple HP printers are prone to multiple cross-site scripting vulnerabilities because they fail to sufficiently sanitize user-supplied input.
Attacker-supplied HTML and script code would run in the context of the affected site, potentially allowing the attacker to steal cookie-based authentication credentials.
Multiple HP printers are prone to multiple cross-site scripting vulnerabilities because they fail to sufficiently sanitize user-supplied input.
Attacker-supplied HTML and script code would run in the context of the affected site, potentially allowing the attacker to steal cookie-based authentication credentials.
Exploit / POC
Multiple HP JetDirect Printers Multiple Cross Site Scripting Vulnerabilities
An attacker can exploit these issues by enticing an unsuspecting victim to follow a malicious URI.
An attacker can exploit these issues by enticing an unsuspecting victim to follow a malicious URI.
Solution / Fix
Multiple HP JetDirect Printers Multiple Cross Site Scripting Vulnerabilities
Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
References
Multiple HP JetDirect Printers Multiple Cross Site Scripting Vulnerabilities
References:
References: