Directory Traversal Vulnerability in HP Managed Printing Administration
CVE-2011-4168

Currently unrated

Key Information:

Vendor

HP
Status
Managed Printing Administration
Vendor
CVE Published:
27 December 2011

What is CVE-2011-4168?

A directory traversal vulnerability exists in HP Managed Printing Administration's hpmpa/jobDelivery/Default.asp before version 2.6.4. This flaw allows remote attackers to manipulate crafted form data to create arbitrary files on the server. Such exploitation could lead to unauthorized access or modifications of server data, posing significant security risks to affected systems.

References

http://www.zerodayinitiative.com/advisories/ZDI-11-354/
x_refsource_MISC
http://h20000.www2.hp.com/bizsupport/TechSupport/Document...
vendor-advisoryx_refsource_HP
http://h20000.www2.hp.com/bizsupport/TechSupport/Document...
vendor-advisoryx_refsource_HP

Timeline

  • Vulnerability Reserved

  • Vulnerability published

.