CVE-2010-4107 (GCVE-0-2010-4107)
Vulnerability from cvelistv5
Published
2010-11-17 15:00
Modified
2024-08-07 03:34
Severity ?
CWE
  • n/a
Summary
The default configuration of the PJL Access value in the File System External Access settings on HP LaserJet MFP printers, Color LaserJet MFP printers, and LaserJet 4100, 4200, 4300, 5100, 8150, and 9000 printers enables PJL commands that use the device's filesystem, which allows remote attackers to read arbitrary files via a command inside a print job, as demonstrated by a directory traversal attack.
References
hp-security-alert@hp.com http://secunia.com/advisories/42238 Vendor Advisory
hp-security-alert@hp.com http://securityreason.com/securityalert/8328
hp-security-alert@hp.com http://securitytracker.com/id?1024741
hp-security-alert@hp.com http://www.exploit-db.com/exploits/15631
hp-security-alert@hp.com http://www.itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02004333
hp-security-alert@hp.com http://www.itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02004333
hp-security-alert@hp.com http://www.nruns.com/_downloads/SA-2010%20003-Hewlett-Packard.pdf
hp-security-alert@hp.com http://www.securityfocus.com/bid/44882
hp-security-alert@hp.com http://www.vupen.com/english/advisories/2010/2987 Vendor Advisory
hp-security-alert@hp.com https://exchange.xforce.ibmcloud.com/vulnerabilities/63261
af854a3a-2127-422b-91ae-364da2661108 http://secunia.com/advisories/42238 Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108 http://securityreason.com/securityalert/8328
af854a3a-2127-422b-91ae-364da2661108 http://securitytracker.com/id?1024741
af854a3a-2127-422b-91ae-364da2661108 http://www.exploit-db.com/exploits/15631
af854a3a-2127-422b-91ae-364da2661108 http://www.itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02004333
af854a3a-2127-422b-91ae-364da2661108 http://www.itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02004333
af854a3a-2127-422b-91ae-364da2661108 http://www.nruns.com/_downloads/SA-2010%20003-Hewlett-Packard.pdf
af854a3a-2127-422b-91ae-364da2661108 http://www.securityfocus.com/bid/44882
af854a3a-2127-422b-91ae-364da2661108 http://www.vupen.com/english/advisories/2010/2987 Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108 https://exchange.xforce.ibmcloud.com/vulnerabilities/63261
Impacted products
Vendor Product Version
n/a n/a Version: n/a
Show details on NVD website

To clipboard 

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T03:34:37.764Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "1024741",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://securitytracker.com/id?1024741"
          },
          {
            "name": "15631",
            "tags": [
              "exploit",
              "x_refsource_EXPLOIT-DB",
              "x_transferred"
            ],
            "url": "http://www.exploit-db.com/exploits/15631"
          },
          {
            "name": "8328",
            "tags": [
              "third-party-advisory",
              "x_refsource_SREASON",
              "x_transferred"
            ],
            "url": "http://securityreason.com/securityalert/8328"
          },
          {
            "name": "HPSBPI02575",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://www.itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02004333"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://www.nruns.com/_downloads/SA-2010%20003-Hewlett-Packard.pdf"
          },
          {
            "name": "42238",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/42238"
          },
          {
            "name": "ADV-2010-2987",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2010/2987"
          },
          {
            "name": "44882",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/44882"
          },
          {
            "name": "SSRT090255",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://www.itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02004333"
          },
          {
            "name": "hp-laserjet-pjl-directory-traversal(63261)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/63261"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2010-11-15T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "The default configuration of the PJL Access value in the File System External Access settings on HP LaserJet MFP printers, Color LaserJet MFP printers, and LaserJet 4100, 4200, 4300, 5100, 8150, and 9000 printers enables PJL commands that use the device\u0027s filesystem, which allows remote attackers to read arbitrary files via a command inside a print job, as demonstrated by a directory traversal attack."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-08-16T14:57:01",
        "orgId": "74586083-13ce-40fd-b46a-8e5d23cfbcb2",
        "shortName": "hp"
      },
      "references": [
        {
          "name": "1024741",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://securitytracker.com/id?1024741"
        },
        {
          "name": "15631",
          "tags": [
            "exploit",
            "x_refsource_EXPLOIT-DB"
          ],
          "url": "http://www.exploit-db.com/exploits/15631"
        },
        {
          "name": "8328",
          "tags": [
            "third-party-advisory",
            "x_refsource_SREASON"
          ],
          "url": "http://securityreason.com/securityalert/8328"
        },
        {
          "name": "HPSBPI02575",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://www.itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02004333"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://www.nruns.com/_downloads/SA-2010%20003-Hewlett-Packard.pdf"
        },
        {
          "name": "42238",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/42238"
        },
        {
          "name": "ADV-2010-2987",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2010/2987"
        },
        {
          "name": "44882",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/44882"
        },
        {
          "name": "SSRT090255",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://www.itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02004333"
        },
        {
          "name": "hp-laserjet-pjl-directory-traversal(63261)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/63261"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "hp-security-alert@hp.com",
          "ID": "CVE-2010-4107",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The default configuration of the PJL Access value in the File System External Access settings on HP LaserJet MFP printers, Color LaserJet MFP printers, and LaserJet 4100, 4200, 4300, 5100, 8150, and 9000 printers enables PJL commands that use the device\u0027s filesystem, which allows remote attackers to read arbitrary files via a command inside a print job, as demonstrated by a directory traversal attack."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "1024741",
              "refsource": "SECTRACK",
              "url": "http://securitytracker.com/id?1024741"
            },
            {
              "name": "15631",
              "refsource": "EXPLOIT-DB",
              "url": "http://www.exploit-db.com/exploits/15631"
            },
            {
              "name": "8328",
              "refsource": "SREASON",
              "url": "http://securityreason.com/securityalert/8328"
            },
            {
              "name": "HPSBPI02575",
              "refsource": "HP",
              "url": "http://www.itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02004333"
            },
            {
              "name": "http://www.nruns.com/_downloads/SA-2010%20003-Hewlett-Packard.pdf",
              "refsource": "MISC",
              "url": "http://www.nruns.com/_downloads/SA-2010%20003-Hewlett-Packard.pdf"
            },
            {
              "name": "42238",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/42238"
            },
            {
              "name": "ADV-2010-2987",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2010/2987"
            },
            {
              "name": "44882",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/44882"
            },
            {
              "name": "SSRT090255",
              "refsource": "HP",
              "url": "http://www.itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02004333"
            },
            {
              "name": "hp-laserjet-pjl-directory-traversal(63261)",
              "refsource": "XF",
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/63261"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "74586083-13ce-40fd-b46a-8e5d23cfbcb2",
    "assignerShortName": "hp",
    "cveId": "CVE-2010-4107",
    "datePublished": "2010-11-17T15:00:00",
    "dateReserved": "2010-10-27T00:00:00",
    "dateUpdated": "2024-08-07T03:34:37.764Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1",
  "vulnerability-lookup:meta": {
    "nvd": "{\"cve\":{\"id\":\"CVE-2010-4107\",\"sourceIdentifier\":\"hp-security-alert@hp.com\",\"published\":\"2010-11-17T16:00:02.623\",\"lastModified\":\"2025-04-11T00:51:21.963\",\"vulnStatus\":\"Deferred\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"The default configuration of the PJL Access value in the File System External Access settings on HP LaserJet MFP printers, Color LaserJet MFP printers, and LaserJet 4100, 4200, 4300, 5100, 8150, and 9000 printers enables PJL commands that use the device\u0027s filesystem, which allows remote attackers to read arbitrary files via a command inside a print job, as demonstrated by a directory traversal attack.\"},{\"lang\":\"es\",\"value\":\"La configuraci\u00f3n por defecto del valor PJL Access en las opciones de File System External Access  de las impresoras HP LaserJet MFP, Color LaserJet MFP, LaserJet 4100, 4200, 4300, 5100, 8150, y 9000, activan los comandos PJL que usa el sistema de archivos del dispositivo, lo que permite a atacantes remotos la lectura de archivos de su elecci\u00f3n a trav\u00e9s de un comando en el trabajo activo como se ha demostrado con un ataque de salto de directorio.\"}],\"metrics\":{\"cvssMetricV2\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"2.0\",\"vectorString\":\"AV:N/AC:L/Au:N/C:C/I:N/A:N\",\"baseScore\":7.8,\"accessVector\":\"NETWORK\",\"accessComplexity\":\"LOW\",\"authentication\":\"NONE\",\"confidentialityImpact\":\"COMPLETE\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"NONE\"},\"baseSeverity\":\"HIGH\",\"exploitabilityScore\":10.0,\"impactScore\":6.9,\"acInsufInfo\":false,\"obtainAllPrivilege\":false,\"obtainUserPrivilege\":false,\"obtainOtherPrivilege\":false,\"userInteractionRequired\":false}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-22\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:h:hp:9000:*:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"FF8B3AD7-0806-4A30-82A5-3C82C740CAEB\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:h:hp:color_laserjet_mfp:*:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"F8AB31A9-1978-47B9-B3E6-A596C429C190\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:h:hp:laserjet_4100:*:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"549105CC-BA47-4C39-8B8A-9CAC39266B30\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:h:hp:laserjet_4200:*:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"4993667F-9DE8-4DC9-90B1-A6D3AB6BFB0A\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:h:hp:laserjet_4300:*:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"3B4B141B-3358-469D-8331-88C5924763EC\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:h:hp:laserjet_5100:*:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"BC0F236F-7EC3-440B-8FF4-362729EF0807\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:h:hp:laserjet_8150:*:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"F94DFDFD-0CEA-4EC5-8E7D-0548DCAE5563\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:h:hp:laserjet_mfp:*:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"7597BC26-E540-4FAF-AEAA-38DA4D09191C\"}]}]}],\"references\":[{\"url\":\"http://secunia.com/advisories/42238\",\"source\":\"hp-security-alert@hp.com\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"http://securityreason.com/securityalert/8328\",\"source\":\"hp-security-alert@hp.com\"},{\"url\":\"http://securitytracker.com/id?1024741\",\"source\":\"hp-security-alert@hp.com\"},{\"url\":\"http://www.exploit-db.com/exploits/15631\",\"source\":\"hp-security-alert@hp.com\"},{\"url\":\"http://www.itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02004333\",\"source\":\"hp-security-alert@hp.com\"},{\"url\":\"http://www.itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02004333\",\"source\":\"hp-security-alert@hp.com\"},{\"url\":\"http://www.nruns.com/_downloads/SA-2010%20003-Hewlett-Packard.pdf\",\"source\":\"hp-security-alert@hp.com\"},{\"url\":\"http://www.securityfocus.com/bid/44882\",\"source\":\"hp-security-alert@hp.com\"},{\"url\":\"http://www.vupen.com/english/advisories/2010/2987\",\"source\":\"hp-security-alert@hp.com\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"https://exchange.xforce.ibmcloud.com/vulnerabilities/63261\",\"source\":\"hp-security-alert@hp.com\"},{\"url\":\"http://secunia.com/advisories/42238\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"http://securityreason.com/securityalert/8328\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://securitytracker.com/id?1024741\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.exploit-db.com/exploits/15631\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02004333\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02004333\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.nruns.com/_downloads/SA-2010%20003-Hewlett-Packard.pdf\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.securityfocus.com/bid/44882\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.vupen.com/english/advisories/2010/2987\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"https://exchange.xforce.ibmcloud.com/vulnerabilities/63261\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"}]}}"
  }
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.




Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
  • Confirmed: The vulnerability is confirmed from an analyst perspective.
  • Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
  • Patched: This vulnerability was successfully patched by the user reporting the sighting.
  • Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
  • Not confirmed: The user expresses doubt about the veracity of the vulnerability.
  • Not patched: This vulnerability was not successfully patched by the user reporting the sighting.