[22190] in bugtraq
Re: Xerox N40 printers and Code Red worm
daemon@ATHENA.MIT.EDU (andrew morgan)
Fri Aug 10 15:25:20 2001
Date: Fri, 10 Aug 2001 09:11:51 -0700 (PDT)
From: andrew morgan <morgan@orst.edu>
To: Fox <gfox@acs.ryerson.ca>
Cc: <bugtraq@securityfocus.com>
In-Reply-To: <3B73F9B5.EC71E24D@acs.ryerson.ca>
Message-ID: <Pine.LNX.4.30.0108100906530.9267-100000@bowman.scf.orst.edu>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
On Fri, 10 Aug 2001, Fox wrote:
> I spoke with Xerox tech support at 11:00 this morning and was told the
> firmware upgrade does NOT remove the Code Red susceptibility. They
> said, "We're working on it."
>
> No more network printing to the Xerox.
When we spoke to them, they did not have a clue if the upgrade fixed the
Code Red vulnerability. They hadn't even heard of Code Red (which
inspires confidence). But we tried the firmware upgrade anyways. We have
three N40 printers, and we applied the upgrade to one of them. The other
two continued to crash, but the upgrade appeared to protect the first one.
We applied the upgrade to the other printers and have not had any problems
since.
Andy
