SNMP Vulnerability, Is SENDMAIL Affected?
asked by:
Tracy Johnson
MSI Schaevitz Sensors

No, but HP Laser printers use SNMP for signaling status.  An attempt to
block SNMP at one of our routers prevented printing of spoolfiles thru the
router.

Console message was:
     :12:15/46/Output spooler, LDEV #951:  SNMP error SNMP_ResponseTimeout
reported
     while retrieving printer status.
     Native Mode Spooler message 9656

     12:15/46/Output spooler, LDEV #951:  Cannot communicate with network
printer.
     Check network xport config, NPCONFIG.PUB.SYS, xport and links started
status,
     intermediate network, and printer status.
     Native Mode Spooler message 9662

This is the typical message seen when a device is physically disconnected or
otherwise no longer present on the network, at least in cases where all was
well before.  I expect if an intrusion was to occur if the form of a Denial
of Service attack, we would see the same error messages.

Note: It was still possible to PING the printer, but printing was inhibited
by the lack of status signaling.

Budd Marsh
Systems Administrator
Zones, Inc.
[log in to unmask]
425-430-3452
www.zones.com

* To join/leave the list, search archives, change list settings, *
* etc., please visit http://raven.utc.edu/archives/hp3000-l.html *