CERTA-2007-AVI-036

Vulnerability from certfr_avis - Published: 2007-01-18 - Updated: 2007-01-18

HP JetDirect est un serveur d'impression. Une vulnérabilité dans le service FTP permettrait un déni de service à distance.

Description

HP JetDirect est un serveur d'impression en carte autonome ou intégré dans des imprimantes. Il embarque divers serveurs, dont un serveur FTP.

Une vulnérabilité non spécifiée permettrait à un utilisateur malveillant de provoquer un déni de service. Cette vulnérabilité ne serait exploitable que sur le réseau local.

Solution

Mettre à jour le firmware. Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

None
Impacted products
Vendor Product Description
N/A N/A HP JetDirect 300 Series ;
N/A N/A HP JetDirect 175 Series ;
N/A N/A HP JetDirect 170 Series ;
N/A N/A HP JetDirect 310 Series ;
N/A N/A HP JetDirect 150 Series ;
N/A N/A HP JetDirect 600n ;
N/A N/A HP JetDirect 500 Series ;
N/A N/A HP JetDirect 610n ;
N/A N/A HP JetDirect 635n.
References
Bulletin HP bpj07429 None vendor-advisory

Show details on source website

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "HP JetDirect 300 Series ;",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "N/A",
          "scada": false
        }
      }
    },
    {
      "description": "HP JetDirect 175 Series ;",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "N/A",
          "scada": false
        }
      }
    },
    {
      "description": "HP JetDirect 170 Series ;",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "N/A",
          "scada": false
        }
      }
    },
    {
      "description": "HP JetDirect 310 Series ;",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "N/A",
          "scada": false
        }
      }
    },
    {
      "description": "HP JetDirect 150 Series ;",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "N/A",
          "scada": false
        }
      }
    },
    {
      "description": "HP JetDirect 600n ;",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "N/A",
          "scada": false
        }
      }
    },
    {
      "description": "HP JetDirect 500 Series ;",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "N/A",
          "scada": false
        }
      }
    },
    {
      "description": "HP JetDirect 610n ;",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "N/A",
          "scada": false
        }
      }
    },
    {
      "description": "HP JetDirect 635n.",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "N/A",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Description\n\nHP JetDirect est un serveur d\u0027impression en carte autonome ou int\u00e9gr\u00e9\ndans des imprimantes. Il embarque divers serveurs, dont un serveur FTP.\n\nUne vuln\u00e9rabilit\u00e9 non sp\u00e9cifi\u00e9e permettrait \u00e0 un utilisateur malveillant\nde provoquer un d\u00e9ni de service. Cette vuln\u00e9rabilit\u00e9 ne serait\nexploitable que sur le r\u00e9seau local.\n\n## Solution\n\nMettre \u00e0 jour le firmware. Se r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de\nl\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).\n",
  "cves": [],
  "initial_release_date": "2007-01-18T00:00:00",
  "last_revision_date": "2007-01-18T00:00:00",
  "links": [],
  "reference": "CERTA-2007-AVI-036",
  "revisions": [
    {
      "description": "version initiale.",
      "revision_date": "2007-01-18T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "D\u00e9ni de service \u00e0 distance"
    }
  ],
  "summary": "\u003cspan class=\"textit\"\u003eHP JetDirect\u003c/span\u003e est un serveur d\u0027impression.\nUne vuln\u00e9rabilit\u00e9 dans le service FTP permettrait un d\u00e9ni de service \u00e0\ndistance.\n",
  "title": "Vuln\u00e9rabilit\u00e9 de HP JetDirect",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin HP bpj07429",
      "url": "http://www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=bpj07429"
    }
  ]
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.


Loading…

Loading…

Loading…

Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.


Loading…

Detection rules are retrieved from Rulezet.

Loading…

Loading…