Security Incidents mailing list archives

Re: Printer exploit?


From: lifeonmars <lifeonmars () ziplip com>
Date: 27 Jun 2001 03:15:14 -0000

I have seen similar things when running nessus against a local subnet
during security audits. It was a while ago but I believe the particular
attack is the 'land' dos by m3lt.
http://www.insecure.org/sploits/land.ip.DOS.html

On Tue, 26 Jun 2001, Brendan Murphy wrote:

Hi all-
  More than a few of our networked HP Laserjet printers have been
sporadically printing out entire trays of paper that have a '1', 'u', 'i'
in the upper right hand corner of the page, -or- a string of text along   
the top of the page.  The jobs don't appear on the queue.  This problem
was noticed very rarely beginning a couple of months ago, but has
increased in frequency over the last two evenings. ...and it usually only
occurs during the evening...but has occured during the day.  Again, it
usually goes through the entire tray of paper unless the printer is
shutdown.
   Has anyone heard of any exploits to LaserJet printers, or printers in
general that might cause this problem?  We've been through the gambit with
HP and nothing seems to match...



---------------------------------------
-t


----------------------------------------------------------------------------


This list is provided by the SecurityFocus ARIS analyzer service.
For more information on this free incident handling, management 
and tracking system please see:

http://aris.securityfocus.com


Current thread: