CVE-2002-1796 - Vulnerability Details - OpenCVE

ChaiVM EZloader for HP color LaserJet 4500 and 4550 and HP LaserJet 4100 and 8150 does not properly verify JAR signatures for new services, which allows local users to load unauthorized Chai services.

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

No CVSS v3.0

Access Vector Local

Access Complexity Low

Authentication None

Confidentiality Impact Partial

Integrity Impact Partial

Availability Impact Partial

This CVE is not in the KEV list.

The EPSS score is 0.00108.

Exploitation none

Automatable no

Technical Impact total

Vendors	Products
Hp	Chaivm Ezloader Laserjet 4100 Laserjet 4500 Laserjet 4550 Laserjet 8150

Configuration 1 [-]

AND

cpe:2.3:a:hp:chaivm_ezloader:-:*:*:*:*:*:*:*

OR	cpe:2.3:h:hp:laserjet_4100:-:::::::*
	cpe:2.3:h:hp:laserjet_4500:-:::::::*
	cpe:2.3:h:hp:laserjet_4550:-:::::::*
	cpe:2.3:h:hp:laserjet_8150:-:::::::*

No data.

No data.

Advisories

No advisories yet.

Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References

Link	Providers
http://online.securityfocus.com/advisories/4317
http://www.iss.net/security_center/static/9695.php
http://www.phenoelit.de/stuff/HP_Chai.txt
http://www.securityfocus.com/archive/1/284648
http://www.securityfocus.com/bid/5334

History

Thu, 16 Jan 2025 20:15:00 +0000

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}`

MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2005-06-28T04:00:00Z

Updated: 2025-01-16T19:24:39.019Z

Reserved: 2005-06-28T04:00:00Z

Link: CVE-2002-1796

Vulnrichment

Updated: 2024-08-08T03:34:56.348Z

NVD

Status : Deferred

Published: 2002-12-31T05:00:00.000

Modified: 2025-04-03T01:03:51.193

Link: CVE-2002-1796

Redhat

No data.

OpenCVE Enrichment

No data.

{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "descriptions": [{"lang": "en", "value": "ChaiVM EZloader for HP color LaserJet 4500 and 4550 and HP LaserJet 4100 and 8150 does not properly verify JAR signatures for new services, which allows local users to load unauthorized Chai services."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2005-06-28T04:00:00Z", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre"}, "references": [{"tags": ["x_refsource_MISC"], "url": "http://www.phenoelit.de/stuff/HP_Chai.txt"}, {"name": "5334", "tags": ["vdb-entry", "x_refsource_BID"], "url": "http://www.securityfocus.com/bid/5334"}, {"name": "HPSBUX0207-203", "tags": ["vendor-advisory", "x_refsource_HP"], "url": "http://online.securityfocus.com/advisories/4317"}, {"name": "hp-chaivm-add-services(9695)", "tags": ["vdb-entry", "x_refsource_XF"], "url": "http://www.iss.net/security_center/static/9695.php"}, {"name": "20020227 Phenoelit Advisory #0815 +--", "tags": ["mailing-list", "x_refsource_BUGTRAQ"], "url": "http://www.securityfocus.com/archive/1/284648"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "cve@mitre.org", "ID": "CVE-2002-1796", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "ChaiVM EZloader for HP color LaserJet 4500 and 4550 and HP LaserJet 4100 and 8150 does not properly verify JAR signatures for new services, which allows local users to load unauthorized Chai services."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "http://www.phenoelit.de/stuff/HP_Chai.txt", "refsource": "MISC", "url": "http://www.phenoelit.de/stuff/HP_Chai.txt"}, {"name": "5334", "refsource": "BID", "url": "http://www.securityfocus.com/bid/5334"}, {"name": "HPSBUX0207-203", "refsource": "HP", "url": "http://online.securityfocus.com/advisories/4317"}, {"name": "hp-chaivm-add-services(9695)", "refsource": "XF", "url": "http://www.iss.net/security_center/static/9695.php"}, {"name": "20020227 Phenoelit Advisory #0815 +--", "refsource": "BUGTRAQ", "url": "http://www.securityfocus.com/archive/1/284648"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-08T03:34:56.348Z"}, "title": "CVE Program Container", "references": [{"tags": ["x_refsource_MISC", "x_transferred"], "url": "http://www.phenoelit.de/stuff/HP_Chai.txt"}, {"name": "5334", "tags": ["vdb-entry", "x_refsource_BID", "x_transferred"], "url": "http://www.securityfocus.com/bid/5334"}, {"name": "HPSBUX0207-203", "tags": ["vendor-advisory", "x_refsource_HP", "x_transferred"], "url": "http://online.securityfocus.com/advisories/4317"}, {"name": "hp-chaivm-add-services(9695)", "tags": ["vdb-entry", "x_refsource_XF", "x_transferred"], "url": "http://www.iss.net/security_center/static/9695.php"}, {"name": "20020227 Phenoelit Advisory #0815 +--", "tags": ["mailing-list", "x_refsource_BUGTRAQ", "x_transferred"], "url": "http://www.securityfocus.com/archive/1/284648"}]}, {"problemTypes": [{"descriptions": [{"type": "CWE", "cweId": "CWE-347", "lang": "en", "description": "CWE-347 Improper Verification of Cryptographic Signature"}]}], "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.8, "attackVector": "LOCAL", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}}, {"other": {"type": "ssvc", "content": {"timestamp": "2024-02-09T17:57:39.682936Z", "id": "CVE-2002-1796", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-01-16T19:24:39.019Z"}}]}, "cveMetadata": {"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2002-1796", "datePublished": "2005-06-28T04:00:00Z", "dateReserved": "2005-06-28T04:00:00Z", "dateUpdated": "2025-01-16T19:24:39.019Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CVE Program Container", "references": [{"url": "http://www.phenoelit.de/stuff/HP_Chai.txt", "tags": ["x_refsource_MISC", "x_transferred"]}, {"url": "http://www.securityfocus.com/bid/5334", "name": "5334", "tags": ["vdb-entry", "x_refsource_BID", "x_transferred"]}, {"url": "http://online.securityfocus.com/advisories/4317", "name": "HPSBUX0207-203", "tags": ["vendor-advisory", "x_refsource_HP", "x_transferred"]}, {"url": "http://www.iss.net/security_center/static/9695.php", "name": "hp-chaivm-add-services(9695)", "tags": ["vdb-entry", "x_refsource_XF", "x_transferred"]}, {"url": "http://www.securityfocus.com/archive/1/284648", "name": "20020227 Phenoelit Advisory #0815 +--", "tags": ["mailing-list", "x_refsource_BUGTRAQ", "x_transferred"]}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-08T03:34:56.348Z"}}, {"title": "CISA ADP Vulnrichment", "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.8, "attackVector": "LOCAL", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}}, {"other": {"type": "ssvc", "content": {"id": "CVE-2002-1796", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2024-02-09T17:57:39.682936Z"}}}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-347", "description": "CWE-347 Improper Verification of Cryptographic Signature"}]}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-01-16T19:23:32.490Z"}}], "cna": {"affected": [{"vendor": "n/a", "product": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "references": [{"url": "http://www.phenoelit.de/stuff/HP_Chai.txt", "tags": ["x_refsource_MISC"]}, {"url": "http://www.securityfocus.com/bid/5334", "name": "5334", "tags": ["vdb-entry", "x_refsource_BID"]}, {"url": "http://online.securityfocus.com/advisories/4317", "name": "HPSBUX0207-203", "tags": ["vendor-advisory", "x_refsource_HP"]}, {"url": "http://www.iss.net/security_center/static/9695.php", "name": "hp-chaivm-add-services(9695)", "tags": ["vdb-entry", "x_refsource_XF"]}, {"url": "http://www.securityfocus.com/archive/1/284648", "name": "20020227 Phenoelit Advisory #0815 +--", "tags": ["mailing-list", "x_refsource_BUGTRAQ"]}], "descriptions": [{"lang": "en", "value": "ChaiVM EZloader for HP color LaserJet 4500 and 4550 and HP LaserJet 4100 and 8150 does not properly verify JAR signatures for new services, which allows local users to load unauthorized Chai services."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "text", "description": "n/a"}]}], "providerMetadata": {"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre", "dateUpdated": "2005-06-28T04:00:00Z"}, "x_legacyV4Record": {"affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"version": {"version_data": [{"version_value": "n/a"}]}, "product_name": "n/a"}]}, "vendor_name": "n/a"}]}}, "data_type": "CVE", "references": {"reference_data": [{"url": "http://www.phenoelit.de/stuff/HP_Chai.txt", "name": "http://www.phenoelit.de/stuff/HP_Chai.txt", "refsource": "MISC"}, {"url": "http://www.securityfocus.com/bid/5334", "name": "5334", "refsource": "BID"}, {"url": "http://online.securityfocus.com/advisories/4317", "name": "HPSBUX0207-203", "refsource": "HP"}, {"url": "http://www.iss.net/security_center/static/9695.php", "name": "hp-chaivm-add-services(9695)", "refsource": "XF"}, {"url": "http://www.securityfocus.com/archive/1/284648", "name": "20020227 Phenoelit Advisory #0815 +--", "refsource": "BUGTRAQ"}]}, "data_format": "MITRE", "description": {"description_data": [{"lang": "eng", "value": "ChaiVM EZloader for HP color LaserJet 4500 and 4550 and HP LaserJet 4100 and 8150 does not properly verify JAR signatures for new services, which allows local users to load unauthorized Chai services."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "data_version": "4.0", "CVE_data_meta": {"ID": "CVE-2002-1796", "STATE": "PUBLIC", "ASSIGNER": "cve@mitre.org"}}}}, "cveMetadata": {"cveId": "CVE-2002-1796", "state": "PUBLISHED", "dateUpdated": "2025-01-16T19:24:39.019Z", "dateReserved": "2005-06-28T04:00:00Z", "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "datePublished": "2005-06-28T04:00:00Z", "assignerShortName": "mitre"}, "dataVersion": "5.1"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:hp:chaivm_ezloader:-:*:*:*:*:*:*:*", "matchCriteriaId": "490B782C-11BF-47E2-8899-8B462D2D8AA6", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:hp:laserjet_4100:-:*:*:*:*:*:*:*", "matchCriteriaId": "8A1779FF-AF54-49D7-B357-3CB62371FA21", "vulnerable": false}, {"criteria": "cpe:2.3:h:hp:laserjet_4500:-:*:*:*:*:*:*:*", "matchCriteriaId": "FADCF8F9-297F-43B8-A380-D91FDB66BD98", "vulnerable": false}, {"criteria": "cpe:2.3:h:hp:laserjet_4550:-:*:*:*:*:*:*:*", "matchCriteriaId": "6EEF0E42-3082-4648-BA3A-3372763F72DD", "vulnerable": false}, {"criteria": "cpe:2.3:h:hp:laserjet_8150:-:*:*:*:*:*:*:*", "matchCriteriaId": "E4D75D04-E717-4361-9D62-08DCFF23ED9A", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "ChaiVM EZloader for HP color LaserJet 4500 and 4550 and HP LaserJet 4100 and 8150 does not properly verify JAR signatures for new services, which allows local users to load unauthorized Chai services."}], "id": "CVE-2002-1796", "lastModified": "2025-04-03T01:03:51.193", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "LOW", "accessVector": "LOCAL", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 4.6, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:L/AC:L/Au:N/C:P/I:P/A:P", "version": "2.0"}, "exploitabilityScore": 3.9, "impactScore": 6.4, "obtainAllPrivilege": false, "obtainOtherPrivilege": true, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}], "cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 1.8, "impactScore": 5.9, "source": "nvd@nist.gov", "type": "Primary"}, {"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 1.8, "impactScore": 5.9, "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "type": "Secondary"}]}, "published": "2002-12-31T05:00:00.000", "references": [{"source": "cve@mitre.org", "tags": ["Broken Link", "Patch", "Third Party Advisory", "VDB Entry", "Vendor Advisory"], "url": "http://online.securityfocus.com/advisories/4317"}, {"source": "cve@mitre.org", "tags": ["Broken Link"], "url": "http://www.iss.net/security_center/static/9695.php"}, {"source": "cve@mitre.org", "tags": ["Broken Link", "Vendor Advisory"], "url": "http://www.phenoelit.de/stuff/HP_Chai.txt"}, {"source": "cve@mitre.org", "tags": ["Broken Link", "Third Party Advisory", "VDB Entry"], "url": "http://www.securityfocus.com/archive/1/284648"}, {"source": "cve@mitre.org", "tags": ["Broken Link", "Third Party Advisory", "VDB Entry"], "url": "http://www.securityfocus.com/bid/5334"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Broken Link", "Patch", "Third Party Advisory", "VDB Entry", "Vendor Advisory"], "url": "http://online.securityfocus.com/advisories/4317"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Broken Link"], "url": "http://www.iss.net/security_center/static/9695.php"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Broken Link", "Vendor Advisory"], "url": "http://www.phenoelit.de/stuff/HP_Chai.txt"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Broken Link", "Third Party Advisory", "VDB Entry"], "url": "http://www.securityfocus.com/archive/1/284648"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Broken Link", "Third Party Advisory", "VDB Entry"], "url": "http://www.securityfocus.com/bid/5334"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-347"}], "source": "nvd@nist.gov", "type": "Primary"}, {"description": [{"lang": "en", "value": "CWE-347"}], "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "type": "Secondary"}]}