[21705] in bugtraq
Re: Two birds with one worm.
daemon@ATHENA.MIT.EDU (Brian.J.Mauter)
Fri Jul 20 01:40:31 2001
Date: Thu, 19 Jul 2001 23:10:26 -0500 (CDT)
From: "Brian.J.Mauter" <maute001@bama.ua.edu>
To: <bugtraq@securityfocus.com>
In-Reply-To: <59EF21868C5BD111AEA90060945154911E2C1DE3@umhs-mail02.missouri.edu>
Message-ID: <Pine.GSO.4.30.0107192300580.188-100000@bama.ua.edu>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
Hi,
Testing various other devices on my subnet, I found that my 3Com Wireless
LAN Access Point was not affected, but my HP 4500 was because it has an HP
Jet Direct Card in it. I do not have conclusive evidence that it was Code
Red, but the printer has never acted strangely before. When I call the
printer's webserver, I get a "Device is not attached" error along with "HP
JetDirect [Not available:SNMPException: no response]" at the top of the
page. All of the admin functions fail and I cannot determine if the
printer is even functioning. (It's remote, or else I'd walk over to it
and look.)
I don't know, but this may get any HP device with JetDirect. Can anyone
qualify that?
Brian Mauter
Network Administator
Computer-Based Honors Program
www.cbhp.ua.edu
On Thu, 19 Jul 2001, Harris, Michael C. wrote:
> We have seen HP jet print servers print a page of the exploit targeted at
> port 80 data for each of 600 hosts that have tried to infect each hp
> printer. I have also heard of some issues with some Cisco equipment,
