If exploited, this vulnerability may allow local users the ability to run arbitrary shell commands. Reconfigure OpenMail per the OpenMail Technical Guide. The information in the following Security Advisory should be acted upon as soon as possible. Hewlett-Packard Company will not be liable for any consequences to any customer resulting from customer's failure to fully implement instructions in this Security Advisory as soon as possible. Insecure configuration of any version of OpenMail.
Users can run arbitrary shell commands.
Reconfigure OpenMail per the OpenMail Technical Guide. On the client all that is necessary is to then change the 'Printer Server Command' to point to one of the configured printers. OpenMail's print server uses a configuration file to configure available printers, and validates each print request against its configured printers. Any print requests that do not match the required syntax will not be executed. Once you are on the Main Menu, Click on the Technical Knowledge Database, and it will connect to a HP Search Technical Knowledge DB page.