HP MFP Digital Sending Software CVE-2011-3163 Local Information Disclosure Vulnerability

Bugtraq ID:	50297
Class:	Access Validation Error
CVE:	CVE-2011-3163
Remote:	No
Local:	Yes
Published:	Oct 19 2011 12:00AM
Updated:	Oct 19 2011 12:00AM
Credit:	The vendor reported this issue.
Vulnerable:	HP MFP Digital Sending Software 4.91.21 HP MFP Digital Sending Software 4.91
Not Vulnerable:	HP MFP Digital Sending Software 4.20

HP MFP Digital Sending Software CVE-2011-3163 Local Information Disclosure Vulnerability

HP MFP Digital Sending Software is prone to a local information-disclosure vulnerability.

Exploiting this issue may allow a local attacker to obtain sensitive information that may aid in further attacks.

HP MFP Digital Sending Software 4.91.21 and previous 4.9x versions are affected.

HP MFP Digital Sending Software CVE-2011-3163 Local Information Disclosure Vulnerability

Currently we are not aware of any exploits. If you feel we are in error or if you are aware of any more recent information, please mail us at: [email protected].

HP MFP Digital Sending Software CVE-2011-3163 Local Information Disclosure Vulnerability

Solution:
Vendor updates are available. Please see the references for details.

HP MFP Digital Sending Software CVE-2011-3163 Local Information Disclosure Vulnerability

References:

• HP MFP Digital Sending Software (HP)
  
• HPSBPI02711 SSRT100647 rev.1 - HP MFP Digital Sending Software Running on Window (HP)