CVE-2001-1040

MediumCVSS 6.4/10Last modified Jun 16, 2026

Description

HP LaserJet, and possibly other JetDirect devices, resets the admin password when the device is turned off, which could allow remote attackers to access the device without the password.

Metrics

CVSS 2.0 6.4/10AV:N/AC:L/Au:N/C:P/I:N/A:P

Affected software

No affected versions have been published.

Timeline

Published
Aug 31, 2001
Last modified
Jun 16, 2026
NVD status
Modified

Related CVEs from 2001

CVE-2001-10412.1oracle program in Oracle 8.0.x, 8.1.x and 9.0.1 allows local users to overwrite arbitrary files via a symlink attack on an Oracle log trace CVE-2001-10427.5Transsoft Broker 5.9.5.0 allows remote attackers to read arbitrary files and directories by uploading a .lnk (link) file that points to the CVE-2001-10437.5ArGoSoft FTP Server 1.2.2.2 allows remote attackers to read arbitrary files and directories by uploading a .lnk (link) file that points to tCVE-2001-10447.5Basilix Webmail 0.9.7beta, and possibly other versions, stores *.class and *.inc files under the document root and does not restrict access,CVE-2001-10455.0Directory traversal vulnerability in basilix.php3 in Basilix Webmail 1.0.3beta and earlier allows remote attackers to read arbitrary files vCVE-2001-104610.0Buffer overflow in qpopper (aka qpop or popper) 4.0 through 4.0.2 allows remote attackers to gain privileges via a long username.CVE-2001-10471.2Race condition in OpenBSD VFS allows local users to cause a denial of service (kernel panic) by (1) creating a pipe in one thread and causinCVE-2001-10487.5AWOL PHP script allows remote attackers to include arbitrary files from remote web sites via an HTTP request that sets the includedir variabCVE-2001-10497.5Phorecast PHP script before 0.40 allows remote attackers to include arbitrary files from remote web sites via an HTTP request that sets the CVE-2001-10507.5CCCSoftware CCC PHP script allows remote attackers to include arbitrary files from remote web sites via an HTTP request that sets the includCVE-2001-10517.5Dark Hart Portal (darkportal) PHP script allows remote attackers to include arbitrary files from remote web sites via an HTTP request that sCVE-2001-10527.5Empris PHP script allows remote attackers to include arbitrary files from remote web sites via an HTTP request that sets the includedir vari
CVE-2001-1040: Medium severity, CVSS 6.4 | Vulnix