Re: Printer exploit?

[Vangelis Haniotakis <haniotak () ucnet uoc gr>]

On 28 Jun 2001, John Leach wrote:

> We've noticed a sudden influx of tcp 515 printer port scans over the
> last month on nearly all of our boxes (different sites, different isps)
>
> We *do* have a *really* good HP colour laserjet, I guess the word got
> out.

 Hmm, guess our printers must look tasty as well.

 We got hit by 3 different attackers today, all looking for port 515 on
random IP's. A total of about 60,000 probes launched towards all of our
class B network.

 Is this beginning to look a bit worrying?


--
Vangelis Haniotakis - Network & Communications Centre, University of Crete



----------------------------------------------------------------------------


This list is provided by the SecurityFocus ARIS analyzer service.
For more information on this free incident handling, management 
and tracking system please see:

http://aris.securityfocus.com