CVE-2006-6742

Severity: high (CVSS 7.8 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 3.1% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2006-12-26 · updated 2026-06-16

Description

Multiple buffer overflows in FTP Print Server 2.4 and 2.4.5 in HP LaserJet 5000 Series printers with firmware R.25.15 or R.25.47, and HP LaserJet 5100 Series printers with firmware V.29.12, allow remote attackers to cause a denial of service (device crash) via a long string in the (1) LIST or (2) NLST command.

Affected products

HP Ftp Print Server: 2.4, 2.4.5
HP Laserjet 5000: r.25.15, r.25.47
HP Laserjet 5100: v.29.12

References

http://lists.grok.org.uk/pipermail/full-disclosure/2006-December/051367.html
http://secunia.com/advisories/23396
http://securityreason.com/securityalert/2074
http://www.securityfocus.com/archive/1/454817/100/0/threaded
http://www.vupen.com/english/advisories/2006/5081
http://lists.grok.org.uk/pipermail/full-disclosure/2006-December/051367.html
http://secunia.com/advisories/23396
http://securityreason.com/securityalert/2074
http://www.securityfocus.com/archive/1/454817/100/0/threaded
http://www.vupen.com/english/advisories/2006/5081

Get alerted when CVE-2006-6742 or the next vulnerability affects your stack