Re: LPD/LPRng Problems

From: Nick (nwp@LEMON-COMPUTING.COM)
Date: Tue Apr 17 2001 - 13:37:28 PDT

  • Next message: Kurt Seifried: "Re: Ports vulnerability database"

    On Mon, Apr 16, 2001 at 09:34:30AM -0600, Kenneth Duran wrote:
    
    > Do you think that a wide open JetDirect card could have enough resources to have an agent laid on it and that be used to launch a DOS? UDP probe? that kind of thing.
    
    Given that:
    
    a) jetdirect firmware is updateable;
    b) a significant amount of functionality has been added since the initial
    release.
    
    I would be inclined to say yes, there would be sufficient "spare" capacity
    on the card to do, err, "interesting" things.
    
    Could probably also be rendered useless by malicious update of firmware.
    
    --
    Nick Phillips -- nwp@lemon-computing.com
    You never know how many friends you have until you rent a house on the beach.
    



    This archive was generated by hypermail 2b30 : Tue Apr 17 2001 - 18:43:18 PDT