[36799] in bugtraq
RE: Promiscuous email printing in Canon imageRunner
daemon@ATHENA.MIT.EDU (Jeff Bates)
Fri Oct 1 00:32:42 2004
content-class: urn:content-classes:message
MIME-Version: 1.0
Content-Type: text/plain;
charset="us-ascii"
Date: Thu, 30 Sep 2004 16:30:09 -0400
Message-ID: <E4BA18568610F249B257DE8544D83E530114654B@cswex2k2.snet.crouse.org>
From: "Jeff Bates" <JJB@crouse.org>
To: <bugtraq@securityfocus.com>
Content-Transfer-Encoding: 8bit
Try scanning the Ip address with nmap -A 10.0.0.1
My IR2200 didn't have port 25 open, but it still printed 15-20 sheets of
paper.
- J
-----Original Message-----
From: Matthew E. Lauterbach [mailto:mlauterbach@mail.wtamu.edu]
Sent: Monday, September 27, 2004 5:02 AM
To: bugtraq@securityfocus.com
Subject: RE: Promiscuous email printing in Canon imageRunner
On Thursday, September 23, 2004 5:44 PM Andrew Daviel wrote:
> The Canon iR5000i digital printer (and probably other imageRunner
> models) has a somewhat undocumented print-from-email feature.
>
> Any text/plain email sent to port 25 on the device will be printed.
> The MAIL FROM and RCPT TO values are not authenticated or even checked
> for syntax.
The Canon iR85 does not seem to have this "feature". Doing "telnet
10.0.0.1 25" to either of my iR85 printers returns "Could not open
connection to the host, on port 25: Connect failed".
Matt Lauterbach
