RE: Does anyone know of references for printer exploits?

You really need to investigate what is on the printers.
Some printers have solaris loaded onto them for handling extensive
fonts, postscript processing, and queing large printe jobs. I have
worked with Tektronix printers setup like this. You can logon to the
printer's os and make changes. If the OS has no hardening or patches
then this is the source of the ISS alerts.

What strategy do you have to control data around your perimeter. This
might be your best option for now until you know what you are dealing
with.

Another setup is HP printers which allow you to add a scsi disk which
will store any downloaded fonts and reserve room for print queuing.

Most of the printers with these advanced features have been high
performance dye-sublimination printers for highly detailed and complex
printing.

Cheers
paul

-----Original Message-----
From: [email protected]
[mailto:[email protected]] On Behalf Of Hensinger Aaron
D Contr MCOM
Sent: 03 February 2005 16:44
To: [email protected]
Subject: [Intrusions] Does anyone know of references for printer
exploits?


A recent ISS security scan showed numerous printers as having NFS mounts
available on them. They are rated as a HIGH risk, but reference servers
in their remarks for corrective action. I was curious if anyone knew if
this was indeed a HIGH risk in regards to printers and if so does anyone
have a link they could share about any exploits that may take advantage
of this?

 

Thanks,

Aaron

_______________________________________________
Intrusions mailing list
[email protected]
http://www.dshield.org/mailman/listinfo/intrusions
NOTICE: This e-mail is intended for the named recipient(s). It may contain privileged and/or confidential information. If you are not one of the intended recipients, please notify the sender immediately and destroy this e-mail and attachment(s): you must not copy, distribute, retain or take any action in reliance upon the email or attachment(s). While all reasonable efforts are made to safeguard inbound and outbound e-mails, OAG Worldwide Ltd and its affiliate companies cannot guarantee that attachments are virus-free or are compatible with your systems, and does not accept liability in respect of viruses or computer problems experienced. Thank you.

_______________________________________________
Intrusions mailing list
[email protected]
http://www.dshield.org/mailman/listinfo/intrusions