HP JetDirect Printers FTP Service File Printing Vulnerability

Bugtraq ID:	7422
Class:	Configuration Error
CVE:
Remote:	Yes
Local:	No
Published:	Apr 23 2003 12:00AM
Updated:	Apr 23 2003 12:00AM
Credit:	Vulnerability announced by HP.
Vulnerable:	HP PSC 2510 Photosmart Printer HP JetDirect J6061A HP JetDirect J6058A HP JetDirect J6057A HP JetDirect J6042A HP JetDirect J6039A HP JetDirect J6038A HP JetDirect J6035A HP JetDirect J4169A HP JetDirect J4167A HP JetDirect J3111A rev. G.08.03 HP JetDirect J3111A rev. G.07.17 HP JetDirect J3111A rev. G.07.03 HP JetDirect J3111A rev. G.07.02 HP JetDirect J3111A rev. G.05.35 HP JetDirect J3111A rev. A.08.06 HP JetDirect 300.0 X HP JetDirect x.21.00 HP JetDirect x.20.00 HP JetDirect x.08.32 HP JetDirect x.08.20 HP JetDirect x.08.05 HP JetDirect x.08.04 HP JetDirect x.08.00 HP JetDirect rev. U.23.99 HP JetDirect rev. U.22.00 HP JetDirect rev. L.23.99 HP JetDirect rev. L.22.00 HP JetDirect rev. H.08.20 HP JetDirect rev. H.08.05 HP JetDirect rev. G.08.20 HP JetDirect rev. G.08.04 HP JetDirect J3263A HP JetDirect J3113A HP JetDirect J3111A HP JetDirect J3110A HP JetDirect J2591A HP JetDirect J2552B HP JetDirect J2552A
Not Vulnerable:

HP JetDirect Printers FTP Service File Printing Vulnerability

It has been reported that HP JetDirect Printers accept documents from any source without access control limitations. This could lead to a denial of service or abuse of printing services.

HP JetDirect Printers FTP Service File Printing Vulnerability

No exploit is required for this vulnerability.

HP JetDirect Printers FTP Service File Printing Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

HP JetDirect Printers FTP Service File Printing Vulnerability

References:

• Unsecure Ftpd on HP PSC 2510 Printer (Justin Rush )