Re: Printer exploit?

From: lifeonmars (lifeonmarsat_private)
Date: Tue Jun 26 2001 - 20:15:14 PDT

  • Next message: John Hanks: "RE: Printer exploit?"

    I have seen similar things when running nessus against a local subnet
    during security audits. It was a while ago but I believe the particular
    attack is the 'land' dos by m3lt.
    http://www.insecure.org/sploits/land.ip.DOS.html
    
    On Tue, 26 Jun 2001, Brendan Murphy wrote:
    
    > Hi all-
    >   More than a few of our networked HP Laserjet printers have been
    > sporadically printing out entire trays of paper that have a '1', 'u', 'i'
    > in the upper right hand corner of the page, -or- a string of text along   
    > the top of the page.  The jobs don't appear on the queue.  This problem
    > was noticed very rarely beginning a couple of months ago, but has
    > increased in frequency over the last two evenings. ...and it usually only
    > occurs during the evening...but has occured during the day.  Again, it
    > usually goes through the entire tray of paper unless the printer is
    > shutdown.
    >    Has anyone heard of any exploits to LaserJet printers, or printers in
    > general that might cause this problem?  We've been through the gambit with
    > HP and nothing seems to match...
    
    
    
    ---------------------------------------
    -t
    
    
    ----------------------------------------------------------------------------
    
    
    This list is provided by the SecurityFocus ARIS analyzer service.
    For more information on this free incident handling, management 
    and tracking system please see:
    
    http://aris.securityfocus.com
    



    This archive was generated by hypermail 2b30 : Wed Jun 27 2001 - 17:56:23 PDT