Re: Printer exploit?

[Piotr Klaban <makler () man torun pl>]

On Thu, Jun 28, 2001 at 02:06:53PM +1000, Stuart Fraser (ENZ) wrote:
> Uh oh... Help Guys!
>
> I thought I'd test this our & see what happens just for fun.
> Anyway I telnet'd to port 515 on our HP 5SI printer, & it came up with an
> error on the screen.
> I thoguht "hmmm...nice", no buttons worked on the printer so I flicked it
> off & then back on.

Me writes:
> If you run the command 'telnet localhost printer' (printer == 515)
> and write something - it would be logged with the similar message.
I did not write 'telnet to printer', but 'telnet to localhost',
and localhost can not be on the printer. It is a pity that I wrote
such an advice at all.

I've found almost your problem described at the address
http://www.securiteam.com/exploits/5DQ0G000JA.html
But there is written about garbage strings and that hard
reset would help.

Try to access the printer from the jetadmin or webjetadmin,
and maybe upload the new printer information with the bootp.

-- 
Piotr Klaban


----------------------------------------------------------------------------


This list is provided by the SecurityFocus ARIS analyzer service.
For more information on this free incident handling, management 
and tracking system please see:

http://aris.securityfocus.com