Users of Hewlett Packard LaserJet MFP devices please be advised of a Directory Traversal vulnerability that has been identified.
To view this vulnerability, possible remedies, and others please check out the Security Advisories at Critical Watch (http://criticalwatch.com/support/security-advisories.aspx)
Amplify’d from www.criticalwatch.com
n.runs-SA-2010.003: [n.runs-SA-2010.003] Hewlett Packard LaserJet MFP devices - Directory Traversal in PJL interface
A directory traversal vulnerability has been found in the PJL file
system access interface of various HP LaserJet MFP devices.
File system access through PJL is usually restricted to a specific
part of the file system. Using a pathname such as 0:...... it
is possible to get access to the complete file system of the device.
See this Amp at http://bit.ly/hFwJBK
No comments:
Post a Comment