42238Third-party advisory
http://secunia.com/advisories/42238 CVE-2010-4107
HP LaserJet - Directory Traversal in PJL Interface
Record summary
CVE-2010-4107 has a selected CVSS score of 7.8; EIP currently links 4 catalogued exploits.
Description
The default configuration of the PJL Access value in the File System External Access settings on HP LaserJet MFP printers, Color LaserJet MFP printers, and LaserJet 4100, 4200, 4300, 5100, 8150, and 9000 printers enables PJL commands that use the device's filesystem, which allows remote attackers to read arbitrary files via a command inside a print job, as demonstrated by a directory traversal attack.
Description source: CVE List
Exploitation context
Available material
- Catalogued exploits
- 4
Proofs of concept
4Catalogued exploits
ExploitDBHP LaserJet - Directory Traversal in PJL InterfaceExploitDB exploitby n.runs AGNot analyzed1 file
ExploitDBHP JetDirect PJL - Interface Universal Directory Traversal (Metasploit)ExploitDB exploitby Myo SoeNot analyzed1 file
ExploitDBHP JetDirect PJL - Query Execution (Metasploit)ExploitDB exploitby Myo SoeNot analyzed1 file
ExploitDBHP Laser Jet - JavaScript Persistent Cross-Site Scripting via PJL Directory TraversalExploitDB exploitby @0x00stringNot analyzed1 file
References
108328Third-party advisory
http://securityreason.com/securityalert/8328 1024741vdb entry
http://securitytracker.com/id?1024741 15631exploit
http://www.exploit-db.com/exploits/15631 HPSBPI02575Vendor advisory
http://www.itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02004333 nruns.com
http://www.nruns.com/_downloads/SA-2010%20003-Hewlett-Packard.pdf 44882vdb entry
http://www.securityfocus.com/bid/44882 ADV-2010-2987vdb entry
http://www.vupen.com/english/advisories/2010/2987 hp-laserjet-pjl-directory-traversal(63261)vdb entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/63261 nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2010-4107