medium5.0Public exploit code
CVE-2004-1856
devices_update_printer_fw_upload.hts in HP Web JetAdmin 7.5.2546, when no password is set, allows remote attackers to upload arbitrary files to the printer dir…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- HP Web Jetadmin 7.5.2456 - Printer Firmware Update Script Arbitrary File Upload2004-03-24 · remote · windows · Verified
Impact
devices_update_printer_fw_upload.hts in HP Web JetAdmin 7.5.2546, when no password is set, allows remote attackers to upload arbitrary files to the printer directory.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Hp | Web Jetadmin | Version 7.5.2546 |
References
- NVD record
- CVE.org record
- http://marc.info/?l=bugtraq&m=108016019623003&w=2
- http://sh0dan.org/files/hpjadmadv.txt
- http://www.securityfocus.com/advisories/6492
- http://www.securityfocus.com/bid/9971
- https://exchange.xforce.ibmcloud.com/vulnerabilities/15605
- http://marc.info/?l=bugtraq&m=108016019623003&w=2
- http://sh0dan.org/files/hpjadmadv.txt
- http://www.securityfocus.com/advisories/6492
- http://www.securityfocus.com/bid/9971
- https://exchange.xforce.ibmcloud.com/vulnerabilities/15605