Security Basics mailing list archives

Re: Securing Printers


From: Adam Jones <ajones1 () gmail com>
Date: Thu, 18 Nov 2004 16:14:25 -0600

Another important consideration is if you have security sensitive
ports (135 and 445 on windows come to mind) that are blocked at the
firewall these may be available from your printer. With enough
patience and possibly the right kind of printer someone could
configure it to bounce packets from your host to another system,
allowing the intruder to circumvent your firewall.

Granted this assumes a specific firewall setup, so a good look at your
network policies would confirm/deny the possibility here.

Many of the larger, commercial grade printers have a lot of room to
play with. Imagine print jobs being replaced with lewd messages, even
worse if a scripting language is available to replace only part of a
message.

-Adam


Current thread: