National Vulnerability Database (CVE-2001-1039)

National Cyber-Alert System Vulnerability Summary: CVE-2001-1039
Orirignal release date: 2001-08-31 Source: US-CERT/NIST ### Overview The JetAdmin web interface for HP JetDirect does not set a password for the telnet interface when the admin password is changed, which allows remote attackers to gain access to the printer. ### Impact CVSS Severity: 8 (High) Range: remote Authentication: design Impact Type: avail,sec_prot ### Reference to Advisories, Solutions, and Tools External Source: Security Focus Name: http://www.securityfocus.com/archive/1/201160 adv=1 Hyperlink: http://www.securityfocus.com/archive/1/201160 adv=1 External Source: Security Focus Name: bid3132 Hyperlink: http://www.securityfocus.com/bid/3132 ### Vulnerable Software and Vendor JetAdmin (HP) Technical Details CVE Standard Vulnerability Entry: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2001-1039