Re: Printer exploit?

[John Leach <john () ecsc co uk>]

We've noticed a sudden influx of tcp 515 printer port scans over the
last month on nearly all of our boxes (different sites, different isps)

We *do* have a *really* good HP colour laserjet, I guess the word got
out.

John.
ECSC Ltd.
http://www.ecsc.co.uk


>   More than a few of our networked HP Laserjet printers have been
> sporadically printing out entire trays of paper that have a '1', 'u', 'i'
> in the upper right hand corner of the page, -or- a string of text along
> the top of the page.  The jobs don't appear on the queue.  This problem
> was noticed very rarely beginning a couple of months ago, but has
> increased in frequency over the last two evenings. ...





----------------------------------------------------------------------------


This list is provided by the SecurityFocus ARIS analyzer service.
For more information on this free incident handling, management 
and tracking system please see:

http://aris.securityfocus.com