CVE-2002-1796

HIGH7.8

ChaiVM EZloader for HP color LaserJet 4500 and 4550 and HP LaserJet 4100 and 8150 does not properly verify JAR signatures for new services, which allows local users to load unauthorized Chai services

Published Jun 28, 2005

Modified 1 years ago

No fix available

Details

ChaiVM EZloader for HP color LaserJet 4500 and 4550 and HP LaserJet 4100 and 8150 does not properly verify JAR signatures for new services, which allows local users to load unauthorized Chai services.

References

ADVISORYhttp://online.securityfocus.com/advisories/4317 WEBhttp://www.iss.net/security_center/static/9695.php WEBhttp://www.phenoelit.de/stuff/HP_Chai.txt WEBhttp://www.securityfocus.com/archive/1/284648 WEBhttp://www.securityfocus.com/bid/5334 ADVISORYhttps://www.cve.org/CVERecord?id=CVE-2002-1796

CVSS Analysis

CVSS v3.1

7.8

Exploitability

Attack Vector

LocalAV:L

Attack Complexity

LowAC:L

Privileges Required

LowPR:L

User Interaction

NoneUI:N

Scope

UnchangedS:U

Impact

Confidentiality

HighC:H

Integrity

HighI:H

Availability

HighA:H

7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Ecosystems

Timeline

PublishedJun 28, 2005

ModifiedJan 16, 2025