CVE - CVE-2008-4419

CVE-ID
CVE-2008-4419	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
Directory traversal vulnerability in the HP JetDirect web administration interface in the HP-ChaiSOE 1.0 embedded web server on the LaserJet 9040mfp, LaserJet 9050mfp, and Color LaserJet 9500mfp before firmware 08.110.9; LaserJet 4345mfp and 9200C Digital Sender before firmware 09.120.9; Color LaserJet 4730mfp before firmware 46.200.9; LaserJet 2410, LaserJet 2420, and LaserJet 2430 before firmware 20080819 SPCL112A; LaserJet 4250 and LaserJet 4350 before firmware 20080819 SPCL015A; and LaserJet 9040 and LaserJet 9050 before firmware 20080819 SPCL110A allows remote attackers to read arbitrary files via directory traversal sequences in the URI.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
BID:33611 URL:http://www.securityfocus.com/bid/33611 BUGTRAQ:20090204 DDIVRT-2008-19 HP JetDirect Web Administration Directory Traversal URL:http://www.securityfocus.com/archive/1/500657/100/0/threaded HP:HPSBPI02398 URL:http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01623905 HP:SSRT080166 URL:http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01623905 SECTRACK:1021687 URL:http://www.securitytracker.com/id?1021687 SECUNIA:33779 URL:http://secunia.com/advisories/33779 VUPEN:ADV-2009-0341 URL:~~http://www.vupen.com/english/advisories/2009/0341~~ (Obsolete source)
Assigning CNA
MITRE Corporation
Date Record Created
20081003	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20081003)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)