Arbitrary File Creation Vulnerability

CVE-2024-8405

What is CVE-2024-8405?

An arbitrary file creation flaw in PaperCut NG/MF specifically targets Windows server installations with the Web Print feature enabled. The vulnerability lies in the web-print.exe process, which can be manipulated to create files that shouldn't exist when fed a specially crafted payload. This manipulation can lead to excessive disk space usage, potentially culminating in a Denial of Service (DoS) condition, disrupting the standard operation of the affected server. Organizations using PaperCut on Windows should evaluate their configurations to mitigate potential exploitations.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References