[21715] in bugtraq
Re: Two birds with one worm
daemon@ATHENA.MIT.EDU (pchipman@memphis.edu)
Fri Jul 20 10:33:48 2001
From: <pchipman@memphis.edu>
To: bugtraq@securityfocus.com
Reply-To: pchipman@conceptsyndicate.com
Message-ID: <4cc5d4786c.4786c4cc5d@memphis.edu>
Date: Fri, 20 Jul 2001 02:26:21 -0500
MIME-Version: 1.0
Content-Language: en
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: 7bit
I can confirm that this worm is killing JetDirect cards. The HP
JetDirect Card in our HP LaserJet 4000N has been steadily crashing as
infection attempts hit it; the result is that, every ten to thirty
minutes or so, the printer itself crashes, dumping a page of exception
data from the card and freezing with an "EIO 2 ERROR" message. A hard
reset of the printer is required to make it operational again.
--
Patrick Chipman
System Administrator
University of Memphis Cognitive Science Lab
----- Original Message -----
From: "Brian.J.Mauter" <maute001@bama.ua.edu>
Date: Thursday, July 19, 2001 11:10 pm
Subject: Re: Two birds with one worm.
> Hi,
>
> Testing various other devices on my subnet, I found that my 3Com
> WirelessLAN Access Point was not affected, but my HP 4500 was
> because it has an HP
> Jet Direct Card in it. I do not have conclusive evidence that it
> was Code
> Red, but the printer has never acted strangely before. When I
> call the
> printer's webserver, I get a "Device is not attached" error along
> with "HP
> JetDirect [Not available:SNMPException: no response]" at the top
> of the
> page. All of the admin functions fail and I cannot determine if the
> printer is even functioning. (It's remote, or else I'd walk over
> to it
> and look.)
>
> I don't know, but this may get any HP device with JetDirect. Can
> anyonequalify that?
