« Volver al listado

CVE-2006-1654

Estado: ModificadaMedia (5)—

Directory traversal vulnerability in the HP Color LaserJet 2500 Toolbox and Color LaserJet 4600 Toolbox on Microsoft Windows before 20060402 allows remote attackers to read arbitrary files via a .. (dot dot) in an HTTP GET request to TCP port 5225.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (9)

HP — Color LaserjetHP — Color Laserjet 2500HP — Color Laserjet 2500 ToolboxHP — Color Laserjet 2500lHP — Color Laserjet 2500lseHP — Color Laserjet 2500nHP — Color Laserjet 2500tnHP — Color Laserjet 4600HP — Color Laserjet 4600 Toolbox

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2006-1654",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 5,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N",
          "authentication": "NONE",
          "integrityImpact": "NONE",
          "accessComplexity": "LOW",
          "availabilityImpact": "NONE",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 2.9,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2006-04-06T10:04:00.000",
  "references": [
    {
      "url": "http://archives.neohapsis.com/archives/fulldisclosure/2006-04/0085.html",
      "tags": [
        "Exploit",
        "Patch"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://secunia.com/advisories/19529",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://securitytracker.com/id?1015862",
      "tags": [
        "Exploit",
        "Patch"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.osvdb.org/24396",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.securityfocus.com/archive/1/429893/100/0/threaded",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.securityfocus.com/archive/1/429984/100/0/threaded",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.securityfocus.com/bid/17367",
      "tags": [
        "Exploit"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.vupen.com/english/advisories/2006/1230",
      "source": "cve@mitre.org"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/25627",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://archives.neohapsis.com/archives/fulldisclosure/2006-04/0085.html",
      "tags": [
        "Exploit",
        "Patch"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://secunia.com/advisories/19529",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://securitytracker.com/id?1015862",
      "tags": [
        "Exploit",
        "Patch"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.osvdb.org/24396",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/archive/1/429893/100/0/threaded",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/archive/1/429984/100/0/threaded",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/bid/17367",
      "tags": [
        "Exploit"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.vupen.com/english/advisories/2006/1230",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/25627",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-Other"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Directory traversal vulnerability in the HP Color LaserJet 2500 Toolbox and Color LaserJet 4600 Toolbox on Microsoft Windows before 20060402 allows remote attackers to read arbitrary files via a .. (dot dot) in an HTTP GET request to TCP port 5225."
    }
  ],
  "lastModified": "2026-06-16T22:23:22.777",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:hp:color_laserjet_2500_toolbox:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "2A304024-34D2-42C3-98F4-6BE6BEEEE380"
            },
            {
              "criteria": "cpe:2.3:a:hp:color_laserjet_4600_toolbox:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "93C88DC2-EAE6-443A-BAF2-78943D1F88C5"
            },
            {
              "criteria": "cpe:2.3:h:hp:color_laserjet:4600dn:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "B99CE20D-49C1-4F5B-9C38-9CAE666A291B"
            },
            {
              "criteria": "cpe:2.3:h:hp:color_laserjet:4600dtn:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "43DEF370-33FF-427F-A18B-7256856F7231"
            },
            {
              "criteria": "cpe:2.3:h:hp:color_laserjet:4600hdn:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "001EEE62-31B1-40AC-81BC-A75D75798887"
            },
            {
              "criteria": "cpe:2.3:h:hp:color_laserjet_2500:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "C2E92501-3E8C-4E61-9B65-87A7344747E4"
            },
            {
              "criteria": "cpe:2.3:h:hp:color_laserjet_2500l:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "16651605-4616-44F8-8401-8DD057932BBA"
            },
            {
              "criteria": "cpe:2.3:h:hp:color_laserjet_2500lse:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "8ADB9132-CEF5-47A0-AC21-BE6B7F89B166"
            },
            {
              "criteria": "cpe:2.3:h:hp:color_laserjet_2500n:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "CEB99C79-1DB4-4545-8457-515B1F9F484B"
            },
            {
              "criteria": "cpe:2.3:h:hp:color_laserjet_2500tn:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "95B58AD8-F848-4286-8AB4-A8EA0372D5D2"
            },
            {
              "criteria": "cpe:2.3:h:hp:color_laserjet_4600:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A6A133B7-AEA8-4F26-8632-2CEDE9EBB66E"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}