CVE-2011-4166

Currently unrated

Key Information:

Vendor
HP
Status
Managed Printing Administration
Vendor
CVE Published:
27 December 2011

Summary

Directory traversal vulnerability in the MPAUploader.Uploader.1.UploadFiles method in HP Managed Printing Administration before 2.6.4 allows remote attackers to create arbitrary files via crafted form data.

References

http://www.zerodayinitiative.com/advisories/ZDI-11-352/
x_refsource_MISC
http://h20000.www2.hp.com/bizsupport/TechSupport/Document...
vendor-advisoryx_refsource_HP
http://h20000.www2.hp.com/bizsupport/TechSupport/Document...
vendor-advisoryx_refsource_HP

EPSS Score

96% chance of being exploited in the next 30 days.

Timeline

  • Vulnerability Reserved

  • Vulnerability published

.