Hewlett Packard LaserJet MFP devices: PJL interface Directory Traversal Vulnerability

Users of Hewlett Packard LaserJet MFP devices please be advised of a Directory Traversal vulnerability that has been identified.
To view this vulnerability, possible remedies, and others please check out the Security Advisories at Critical Watch (http://criticalwatch.com/support/security-advisories.aspx)

n.runs-SA-2010.003: [n.runs-SA-2010.003] Hewlett Packard LaserJet MFP devices – Directory Traversal in PJL interface

Affected Products: Various HP LaserJet MFP devices
Description:

A directory traversal vulnerability has been found in the PJL file
system access interface of various HP LaserJet MFP devices.
File system access through PJL is usually restricted to a specific
part of the file system. Using a pathname such as 0:…… it
is possible to get access to the complete file system of the device.

Read more at http://www.criticalwatch.com

 

Advertisements