Security Basics mailing list archives

Strange looking laser printer....


From: "Sean M. Duckett" <sean () cyberclone net>
Date: Tue, 23 Aug 2005 14:46:46 -0500

Ok guys,

I'm a little confused here....what's this "acmsoda" bit running @ port
6969 on my MagicColor 3300 Laser?  Telneting to the port give me a
connection, but all it seems to do is eat input until a ^D; then it says
"goodbye."

A minute later, I scan again, and that port isn't listed....now
connections are refused.

A quick google mentioned bittorrent using that port, but this is a
printer...Any ideas?

<snip>

[Tue Aug 23 14:22:14]
[smd@daemon:~ ]$ sudo nmap -O 192.168.1.55
Password:

Starting nmap 3.81 ( http://www.insecure.org/nmap/ ) at 2005-08-23 14:22
CDT Interesting ports on 192.168.1.55:
(The 1656 ports scanned but not shown below are in state: closed)
PORT     STATE SERVICE
21/tcp   open  ftp
23/tcp   open  telnet
35/tcp   open  priv-print
80/tcp   open  http
515/tcp  open  printer
6969/tcp open  acmsoda
9100/tcp open  jetdirect
MAC Address: 08:00:86:19:6B:FE (Konica Minolta Holdings)
Device type: fileserver|print server|webcam
Running: AXIS embedded
OS details: AXIS Stack -- CD-ROM Server or Print Server or Camera Server

Nmap finished: 1 IP address (1 host up) scanned in 6.744 seconds

<snip>

--smd.

Westheimer's Discovery:
        A couple of months in the laboratory can frequently save a
        couple of hours in the library.


Current thread: