CERTA-2007-AVI-036
Vulnerability from certfr_avis
HP JetDirect est un serveur d'impression. Une vulnérabilité dans le service FTP permettrait un déni de service à distance.
Description
HP JetDirect est un serveur d'impression en carte autonome ou intégré dans des imprimantes. Il embarque divers serveurs, dont un serveur FTP.
Une vulnérabilité non spécifiée permettrait à un utilisateur malveillant de provoquer un déni de service. Cette vulnérabilité ne serait exploitable que sur le réseau local.
Solution
Mettre à jour le firmware. Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
NoneImpacted products
| Vendor | Product | Description | ||
|---|---|---|---|---|
| N/A | N/A | HP JetDirect 300 Series ; | ||
| N/A | N/A | HP JetDirect 175 Series ; | ||
| N/A | N/A | HP JetDirect 170 Series ; | ||
| N/A | N/A | HP JetDirect 310 Series ; | ||
| N/A | N/A | HP JetDirect 150 Series ; | ||
| N/A | N/A | HP JetDirect 600n ; | ||
| N/A | N/A | HP JetDirect 500 Series ; | ||
| N/A | N/A | HP JetDirect 610n ; | ||
| N/A | N/A | HP JetDirect 635n. |
References
| Title | Publication Time | Tags | |||
|---|---|---|---|---|---|
|
|||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "HP JetDirect 300 Series ;",
"product": {
"name": "N/A",
"vendor": {
"name": "N/A",
"scada": false
}
}
},
{
"description": "HP JetDirect 175 Series ;",
"product": {
"name": "N/A",
"vendor": {
"name": "N/A",
"scada": false
}
}
},
{
"description": "HP JetDirect 170 Series ;",
"product": {
"name": "N/A",
"vendor": {
"name": "N/A",
"scada": false
}
}
},
{
"description": "HP JetDirect 310 Series ;",
"product": {
"name": "N/A",
"vendor": {
"name": "N/A",
"scada": false
}
}
},
{
"description": "HP JetDirect 150 Series ;",
"product": {
"name": "N/A",
"vendor": {
"name": "N/A",
"scada": false
}
}
},
{
"description": "HP JetDirect 600n ;",
"product": {
"name": "N/A",
"vendor": {
"name": "N/A",
"scada": false
}
}
},
{
"description": "HP JetDirect 500 Series ;",
"product": {
"name": "N/A",
"vendor": {
"name": "N/A",
"scada": false
}
}
},
{
"description": "HP JetDirect 610n ;",
"product": {
"name": "N/A",
"vendor": {
"name": "N/A",
"scada": false
}
}
},
{
"description": "HP JetDirect 635n.",
"product": {
"name": "N/A",
"vendor": {
"name": "N/A",
"scada": false
}
}
}
],
"affected_systems_content": null,
"content": "## Description\n\nHP JetDirect est un serveur d\u0027impression en carte autonome ou int\u00e9gr\u00e9\ndans des imprimantes. Il embarque divers serveurs, dont un serveur FTP.\n\nUne vuln\u00e9rabilit\u00e9 non sp\u00e9cifi\u00e9e permettrait \u00e0 un utilisateur malveillant\nde provoquer un d\u00e9ni de service. Cette vuln\u00e9rabilit\u00e9 ne serait\nexploitable que sur le r\u00e9seau local.\n\n## Solution\n\nMettre \u00e0 jour le firmware. Se r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de\nl\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).\n",
"cves": [],
"initial_release_date": "2007-01-18T00:00:00",
"last_revision_date": "2007-01-18T00:00:00",
"links": [],
"reference": "CERTA-2007-AVI-036",
"revisions": [
{
"description": "version initiale.",
"revision_date": "2007-01-18T00:00:00.000000"
}
],
"risks": [
{
"description": "D\u00e9ni de service \u00e0 distance"
}
],
"summary": "\u003cspan class=\"textit\"\u003eHP JetDirect\u003c/span\u003e est un serveur d\u0027impression.\nUne vuln\u00e9rabilit\u00e9 dans le service FTP permettrait un d\u00e9ni de service \u00e0\ndistance.\n",
"title": "Vuln\u00e9rabilit\u00e9 de HP JetDirect",
"vendor_advisories": [
{
"published_at": null,
"title": "Bulletin HP bpj07429",
"url": "http://www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=bpj07429"
}
]
}
Loading…
Loading…
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.
Loading…
Loading…