TCP/IP Printer Configuration Utility for Apple.LaserWriter 12/640 PS security problem

From: UkR security team™ (cuctemaat_private)
Date: Fri Oct 25 2002 - 21:52:32 PDT

Next message: Daniel Ahlberg: "GLSA: kth-krb"

Previous message: Sym Security: "RE: DH team: Norton Antivirus Corporate Edition Privilege Escalation, http://online.securityfocus.com/archive/1/296979/2002-10-22/2002-10-28/0"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

Release Date:  October 26, 2002
Product     :  TCP/IP Printer Configuration Utility for 
Apple.LaserWriter 12/640 PS
Vendor      :  Apple Computer, Inc. (http://www.apple.com)
Remote      :  Yes
Author      :  UkR-XblP (cuctemaat_private)/ UkR security team 
/

About :
TCP/IP Printer Configuration Utility is the installation 
and management software for 
Apple.LaserWriter 12/640 PS printer.

Overview:
Device do not set a password for telnet access.  As a 
result, the telnet port will be
left exposed to unrestricted remote access. Remote users 
with malicious intent will
be able to access the device to cause a denial of service, 
or potentially monitor
printer activity to gather information that may be used to 
compromise systems. 


Solution:
Set the telnet password manually after setup printer.
---
Professional hosting for everyone - http://www.host.ru

Next message: Daniel Ahlberg: "GLSA: kth-krb"
Previous message: Sym Security: "RE: DH team: Norton Antivirus Corporate Edition Privilege Escalation, http://online.securityfocus.com/archive/1/296979/2002-10-22/2002-10-28/0"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

This archive was generated by hypermail 2b30 : Sat Oct 26 2002 - 09:30:41 PDT