Vulnerabilities
Misconfiguration
Runtime Security
Compliance
CVE Vulnerabilities

CVE-2006-1654

Published: Apr 06, 2006 | Modified: Oct 18, 2018
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
5 MEDIUM
AV:N/AC:L/Au:N/C:P/I:N/A:N
RedHat/V2
RedHat/V3
Ubuntu
Additional information
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2006-1654
CWEhttps://cwe.mitre.org/data/definitions/NVD-Other.html

Directory traversal vulnerability in the HP Color LaserJet 2500 Toolbox and Color LaserJet 4600 Toolbox on Microsoft Windows before 20060402 allows remote attackers to read arbitrary files via a .. (dot dot) in an HTTP GET request to TCP port 5225.

Affected Software

Name Vendor Start Version End Version
Color_laserjet_2500_toolbox Hp * *
Color_laserjet_4600_toolbox Hp * *
Color_laserjet Hp 4600dn (including) 4600dn (including)
Color_laserjet Hp 4600dtn (including) 4600dtn (including)
Color_laserjet Hp 4600hdn (including) 4600hdn (including)
Color_laserjet_2500 Hp * *
Color_laserjet_2500l Hp * *
Color_laserjet_2500lse Hp * *
Color_laserjet_2500n Hp * *
Color_laserjet_2500tn Hp * *
Color_laserjet_4600 Hp * *

References

Aqua Security is the largest pure-play cloud native security company, providing customers the freedom to innovate and run their businesses with minimal friction. The Aqua Cloud Native Security Platform provides prevention, detection, and response automation across the entire application lifecycle to secure the build, secure cloud infrastructure and secure running workloads wherever they are deployed.
Copyright © 2024 Aqua Security Software Ltd.   Privacy Policy | Terms of Use