Check Point Advisories

Preemptive Protection against HP FTP Print Server Buffer Overflow Vulnerability

Check Point Reference:	CPAI-2007-011
Date Published:	25 Jan 2007
Severity:	Low
Last Updated:	Monday 30 April, 2007
Source:	FrSIRT/ADV-2006-5081
Industry Reference:	CVE-2006-6742
Protection Provided by:
Who is Vulnerable?	Hewlett-Packard (HP) FTP Print Server version 2.4.5 and prior
Vulnerability Description	A denial of service vulnerability has been reported in Hewlett-Packard (HP) Printers with HP FTP Print Server. The vulnerability could be exploited by remote attackers to crash the application via a specially crafted FTP command sent to an affected server.
Vulnerability Details	The vulnerability is caused due to an error in the FTP print server when processing malformed 'LIST' commands. A remote attacker can cause the service to crash via an overly long argument passed to the 'LIST' command. Successful exploitation may cause denial of service condition.