HP3000-L Archives

April 2000, Week 3

HP3000-L@RAVEN.UTC.EDU

Options: Use Monospaced Font
Show Text Part by Default
Show All Mail Headers

Message: [<< First] [< Prev] [Next >] [Last >>]
Topic: [<< First] [< Prev] [Next >] [Last >>]
Author: [<< First] [< Prev] [Next >] [Last >>]

Print Reply
Subject:
From:
Jim Knight <[log in to unmask]>
Reply To:
Jim Knight <[log in to unmask]>
Date:
Fri, 21 Apr 2000 13:17:48 -0400
Content-Type:
text/plain
Parts/Attachments:
text/plain (44 lines)
Ran across this today, anyone seen this?

Jim

---------- Forwarded message ----------
Date: Thu, 20 Apr 2000 13:08:47 +0200
From: Paul Knowles <[log in to unmask]>
To: [log in to unmask]
Cc: [log in to unmask]
Subject: DOS attack against HP JetDirect Printers


Hello,

In case anyone is interested, scanning HP printers with
tools such as nmap will cause the printer to lock up hard.
I discovered this while trying to diagnose a connection
problem we were having with a printer.
I've verified this with at least the following versions of
JetDirect:

Firmware Rev.   : A.08.06
Firmware Rev.   : G.08.03
Firmware Rev.   : G.07.17
Firmware Rev.   : G.07.03

I haven't been able to establish the exact communications
causing the lockup; someone with more experience than I
should check this out.

Any network accessable printer can be put out of service
with a simple nmap -sT -PT HP.printer.tcp.ip
A power cycle is required for reset.

My apologies if i have the wrong email address.
(there is no Submit a Bug instructions on the securityfocus
site).  HP have no bug reporting facilities either...

thanks,

Paul Knowles.
email: [log in to unmask]
finger me at pexppc33.unifr.ch for more contact information

ATOM RSS1 RSS2