← back
CVE-2006-1654

CVE-2006-1654

EPSS 4.7%
Directory traversal vulnerability in the HP Color LaserJet 2500 Toolbox and Color LaserJet 4600 Toolbox on Microsoft Windows before 20060402 allows remote attackers to read arbitrary files via a .. (dot dot) in an HTTP GET request to TCP port 5225.
Affected products
n/a · n/a
public PoCs found — 1
exploitdbwww.exploit-db.com/exploits/27565unverified
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
http://archives.neohapsis.com/archives/fulldisclosure/2006-04/0085.htmlhttp://secunia.com/advisories/19529http://securitytracker.com/id?1015862https://exchange.xforce.ibmcloud.com/vulnerabilities/25627http://www.osvdb.org/24396http://www.securityfocus.com/archive/1/429893/100/0/threadedhttp://www.securityfocus.com/archive/1/429984/100/0/threadedhttp://www.securityfocus.com/bid/17367http://www.vupen.com/english/advisories/2006/1230