CVE-2010-4107
Vulnerability from cvelistv5
Published
2010-11-17 15:00
Modified
2024-08-07 03:34
Severity ?
Summary
The default configuration of the PJL Access value in the File System External Access settings on HP LaserJet MFP printers, Color LaserJet MFP printers, and LaserJet 4100, 4200, 4300, 5100, 8150, and 9000 printers enables PJL commands that use the device's filesystem, which allows remote attackers to read arbitrary files via a command inside a print job, as demonstrated by a directory traversal attack.
References
hp-security-alert@hp.comhttp://secunia.com/advisories/42238Vendor Advisory
hp-security-alert@hp.comhttp://securityreason.com/securityalert/8328
hp-security-alert@hp.comhttp://securitytracker.com/id?1024741
hp-security-alert@hp.comhttp://www.exploit-db.com/exploits/15631
hp-security-alert@hp.comhttp://www.itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02004333
hp-security-alert@hp.comhttp://www.itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02004333
hp-security-alert@hp.comhttp://www.nruns.com/_downloads/SA-2010%20003-Hewlett-Packard.pdf
hp-security-alert@hp.comhttp://www.securityfocus.com/bid/44882
hp-security-alert@hp.comhttp://www.vupen.com/english/advisories/2010/2987Vendor Advisory
hp-security-alert@hp.comhttps://exchange.xforce.ibmcloud.com/vulnerabilities/63261
af854a3a-2127-422b-91ae-364da2661108http://secunia.com/advisories/42238Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108http://securityreason.com/securityalert/8328
af854a3a-2127-422b-91ae-364da2661108http://securitytracker.com/id?1024741
af854a3a-2127-422b-91ae-364da2661108http://www.exploit-db.com/exploits/15631
af854a3a-2127-422b-91ae-364da2661108http://www.itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02004333
af854a3a-2127-422b-91ae-364da2661108http://www.itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02004333
af854a3a-2127-422b-91ae-364da2661108http://www.nruns.com/_downloads/SA-2010%20003-Hewlett-Packard.pdf
af854a3a-2127-422b-91ae-364da2661108http://www.securityfocus.com/bid/44882
af854a3a-2127-422b-91ae-364da2661108http://www.vupen.com/english/advisories/2010/2987Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108https://exchange.xforce.ibmcloud.com/vulnerabilities/63261
Impacted products
Vendor Product Version
n/a n/a Version: n/a
Show details on NVD website

To clipboard 

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T03:34:37.764Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "1024741",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://securitytracker.com/id?1024741"
          },
          {
            "name": "15631",
            "tags": [
              "exploit",
              "x_refsource_EXPLOIT-DB",
              "x_transferred"
            ],
            "url": "http://www.exploit-db.com/exploits/15631"
          },
          {
            "name": "8328",
            "tags": [
              "third-party-advisory",
              "x_refsource_SREASON",
              "x_transferred"
            ],
            "url": "http://securityreason.com/securityalert/8328"
          },
          {
            "name": "HPSBPI02575",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://www.itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02004333"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://www.nruns.com/_downloads/SA-2010%20003-Hewlett-Packard.pdf"
          },
          {
            "name": "42238",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/42238"
          },
          {
            "name": "ADV-2010-2987",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2010/2987"
          },
          {
            "name": "44882",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/44882"
          },
          {
            "name": "SSRT090255",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://www.itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02004333"
          },
          {
            "name": "hp-laserjet-pjl-directory-traversal(63261)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/63261"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2010-11-15T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "The default configuration of the PJL Access value in the File System External Access settings on HP LaserJet MFP printers, Color LaserJet MFP printers, and LaserJet 4100, 4200, 4300, 5100, 8150, and 9000 printers enables PJL commands that use the device\u0027s filesystem, which allows remote attackers to read arbitrary files via a command inside a print job, as demonstrated by a directory traversal attack."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-08-16T14:57:01",
        "orgId": "74586083-13ce-40fd-b46a-8e5d23cfbcb2",
        "shortName": "hp"
      },
      "references": [
        {
          "name": "1024741",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://securitytracker.com/id?1024741"
        },
        {
          "name": "15631",
          "tags": [
            "exploit",
            "x_refsource_EXPLOIT-DB"
          ],
          "url": "http://www.exploit-db.com/exploits/15631"
        },
        {
          "name": "8328",
          "tags": [
            "third-party-advisory",
            "x_refsource_SREASON"
          ],
          "url": "http://securityreason.com/securityalert/8328"
        },
        {
          "name": "HPSBPI02575",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://www.itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02004333"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://www.nruns.com/_downloads/SA-2010%20003-Hewlett-Packard.pdf"
        },
        {
          "name": "42238",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/42238"
        },
        {
          "name": "ADV-2010-2987",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2010/2987"
        },
        {
          "name": "44882",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/44882"
        },
        {
          "name": "SSRT090255",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://www.itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02004333"
        },
        {
          "name": "hp-laserjet-pjl-directory-traversal(63261)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/63261"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "hp-security-alert@hp.com",
          "ID": "CVE-2010-4107",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The default configuration of the PJL Access value in the File System External Access settings on HP LaserJet MFP printers, Color LaserJet MFP printers, and LaserJet 4100, 4200, 4300, 5100, 8150, and 9000 printers enables PJL commands that use the device\u0027s filesystem, which allows remote attackers to read arbitrary files via a command inside a print job, as demonstrated by a directory traversal attack."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "1024741",
              "refsource": "SECTRACK",
              "url": "http://securitytracker.com/id?1024741"
            },
            {
              "name": "15631",
              "refsource": "EXPLOIT-DB",
              "url": "http://www.exploit-db.com/exploits/15631"
            },
            {
              "name": "8328",
              "refsource": "SREASON",
              "url": "http://securityreason.com/securityalert/8328"
            },
            {
              "name": "HPSBPI02575",
              "refsource": "HP",
              "url": "http://www.itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02004333"
            },
            {
              "name": "http://www.nruns.com/_downloads/SA-2010%20003-Hewlett-Packard.pdf",
              "refsource": "MISC",
              "url": "http://www.nruns.com/_downloads/SA-2010%20003-Hewlett-Packard.pdf"
            },
            {
              "name": "42238",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/42238"
            },
            {
              "name": "ADV-2010-2987",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2010/2987"
            },
            {
              "name": "44882",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/44882"
            },
            {
              "name": "SSRT090255",
              "refsource": "HP",
              "url": "http://www.itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02004333"
            },
            {
              "name": "hp-laserjet-pjl-directory-traversal(63261)",
              "refsource": "XF",
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/63261"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "74586083-13ce-40fd-b46a-8e5d23cfbcb2",
    "assignerShortName": "hp",
    "cveId": "CVE-2010-4107",
    "datePublished": "2010-11-17T15:00:00",
    "dateReserved": "2010-10-27T00:00:00",
    "dateUpdated": "2024-08-07T03:34:37.764Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1",
  "vulnerability-lookup:meta": {
    "nvd": "{\"cve\":{\"id\":\"CVE-2010-4107\",\"sourceIdentifier\":\"hp-security-alert@hp.com\",\"published\":\"2010-11-17T16:00:02.623\",\"lastModified\":\"2024-11-21T01:20:15.917\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"The default configuration of the PJL Access value in the File System External Access settings on HP LaserJet MFP printers, Color LaserJet MFP printers, and LaserJet 4100, 4200, 4300, 5100, 8150, and 9000 printers enables PJL commands that use the device\u0027s filesystem, which allows remote attackers to read arbitrary files via a command inside a print job, as demonstrated by a directory traversal attack.\"},{\"lang\":\"es\",\"value\":\"La configuraci\u00f3n por defecto del valor PJL Access en las opciones de File System External Access  de las impresoras HP LaserJet MFP, Color LaserJet MFP, LaserJet 4100, 4200, 4300, 5100, 8150, y 9000, activan los comandos PJL que usa el sistema de archivos del dispositivo, lo que permite a atacantes remotos la lectura de archivos de su elecci\u00f3n a trav\u00e9s de un comando en el trabajo activo como se ha demostrado con un ataque de salto de directorio.\"}],\"metrics\":{\"cvssMetricV2\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"2.0\",\"vectorString\":\"AV:N/AC:L/Au:N/C:C/I:N/A:N\",\"baseScore\":7.8,\"accessVector\":\"NETWORK\",\"accessComplexity\":\"LOW\",\"authentication\":\"NONE\",\"confidentialityImpact\":\"COMPLETE\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"NONE\"},\"baseSeverity\":\"HIGH\",\"exploitabilityScore\":10.0,\"impactScore\":6.9,\"acInsufInfo\":false,\"obtainAllPrivilege\":false,\"obtainUserPrivilege\":false,\"obtainOtherPrivilege\":false,\"userInteractionRequired\":false}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-22\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:h:hp:9000:*:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"FF8B3AD7-0806-4A30-82A5-3C82C740CAEB\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:h:hp:color_laserjet_mfp:*:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"F8AB31A9-1978-47B9-B3E6-A596C429C190\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:h:hp:laserjet_4100:*:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"549105CC-BA47-4C39-8B8A-9CAC39266B30\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:h:hp:laserjet_4200:*:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"4993667F-9DE8-4DC9-90B1-A6D3AB6BFB0A\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:h:hp:laserjet_4300:*:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"3B4B141B-3358-469D-8331-88C5924763EC\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:h:hp:laserjet_5100:*:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"BC0F236F-7EC3-440B-8FF4-362729EF0807\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:h:hp:laserjet_8150:*:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"F94DFDFD-0CEA-4EC5-8E7D-0548DCAE5563\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:h:hp:laserjet_mfp:*:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"7597BC26-E540-4FAF-AEAA-38DA4D09191C\"}]}]}],\"references\":[{\"url\":\"http://secunia.com/advisories/42238\",\"source\":\"hp-security-alert@hp.com\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"http://securityreason.com/securityalert/8328\",\"source\":\"hp-security-alert@hp.com\"},{\"url\":\"http://securitytracker.com/id?1024741\",\"source\":\"hp-security-alert@hp.com\"},{\"url\":\"http://www.exploit-db.com/exploits/15631\",\"source\":\"hp-security-alert@hp.com\"},{\"url\":\"http://www.itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02004333\",\"source\":\"hp-security-alert@hp.com\"},{\"url\":\"http://www.itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02004333\",\"source\":\"hp-security-alert@hp.com\"},{\"url\":\"http://www.nruns.com/_downloads/SA-2010%20003-Hewlett-Packard.pdf\",\"source\":\"hp-security-alert@hp.com\"},{\"url\":\"http://www.securityfocus.com/bid/44882\",\"source\":\"hp-security-alert@hp.com\"},{\"url\":\"http://www.vupen.com/english/advisories/2010/2987\",\"source\":\"hp-security-alert@hp.com\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"https://exchange.xforce.ibmcloud.com/vulnerabilities/63261\",\"source\":\"hp-security-alert@hp.com\"},{\"url\":\"http://secunia.com/advisories/42238\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"http://securityreason.com/securityalert/8328\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://securitytracker.com/id?1024741\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.exploit-db.com/exploits/15631\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02004333\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02004333\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.nruns.com/_downloads/SA-2010%20003-Hewlett-Packard.pdf\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.securityfocus.com/bid/44882\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.vupen.com/english/advisories/2010/2987\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"https://exchange.xforce.ibmcloud.com/vulnerabilities/63261\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"}]}}"
  }
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.




Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
  • Confirmed: The vulnerability is confirmed from an analyst perspective.
  • Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
  • Patched: This vulnerability was successfully patched by the user reporting the sighting.
  • Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
  • Not confirmed: The user expresses doubt about the veracity of the vulnerability.
  • Not patched: This vulnerability was not successfully patched by the user reporting the sighting.