CVE-1999-1062: High severity HP JetDirect vulnerability
HP Laserjet printers with JetDirect cards, when configured with TCP/IP, allow remote attackers to bypass print filters by directly sending PostScript documents to TCP ports 9099 and 9100.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Configuration
If TCP/IP printing is not required, disable TCP/IP on the JetDirect card to prevent remote submissions that bypass print filters.
HP JetDirect TCP/IP enabled = false - Configuration
Close or disable listening on TCP ports 9099 and 9100 on the JetDirect card to prevent direct PostScript documents from being sent to the printer.
HP JetDirect listening_ports = close 9099, close 9100 - Compensating control
Block or filter TCP ports 9099 and 9100 at the network perimeter and/or restrict access to the printer/JetDirect management and printing ports to trusted IP addresses (firewall, ACLs, or VLAN isolation) to prevent remote bypass of print filters.
Event History
Frequently Asked Questions
What is the severity of CVE-1999-1062?
CVE-1999-1062 is considered a high severity vulnerability due to its potential to allow remote unauthorized access to print services.
How do I fix CVE-1999-1062?
To mitigate CVE-1999-1062, configure your HP JetDirect cards to disable TCP ports 9099 and 9100 or restrict access using firewall rules.
Who is affected by CVE-1999-1062?
CVE-1999-1062 affects HP LaserJet printers configured with JetDirect cards that utilize TCP/IP for printing.
What are the potential impacts of CVE-1999-1062?
The impact of CVE-1999-1062 includes the ability for remote attackers to bypass print filters and potentially execute arbitrary commands.
Is CVE-1999-1062 still relevant today?
While CVE-1999-1062 was identified in 1999, it remains relevant for environments still using vulnerable HP JetDirect configurations.