[22073] in bugtraq
HP Jetdirect passwords don't sync
daemon@ATHENA.MIT.EDU (Will Backman)
Wed Aug 1 19:43:29 2001
Date: Wed, 1 Aug 2001 16:48:38 -0400 (Eastern Daylight Time)
From: Will Backman <whb@ceimaine.org>
To: <bugtraq@securityfocus.com>
Message-ID: <Pine.WNT.4.33.0108011644290.-524013@cei3466>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
I have noticed this in a variety of JetDirect products over the past year.
When I got the new one, it is still a problem.
If you configure the device through the web interface, and set the admin
password, it does not create a password for the telnet interface.
Admins who think they have secured the device by giving it a password may
end up with a false sense of security (even though the passwords can
easily be sniffed.)
Will Backman
Coastal Enterprises, Inc.
