[6727] in bugtraq
Re: nestea2 and HP Jet Direct cards.
daemon@ATHENA.MIT.EDU (David LeBlanc)
Sun May 10 17:16:53 1998
Date: Sun, 10 May 1998 16:24:04 -0400
Reply-To: David LeBlanc <dleblanc@MINDSPRING.COM>
From: David LeBlanc <dleblanc@MINDSPRING.COM>
X-To: Damon Petta <dlp@WETWORKS.COM>
To: BUGTRAQ@NETSPACE.ORG
In-Reply-To: <Pine.LNX.3.96.980507220741.1082D-100000@forge.wetworks.com >
At 10:40 PM 5/7/98 -0700, Damon Petta wrote:
>I have also tried bonk, boink, teardrop, overdrop and none of them seem to
>have any effect on the printers.
You don't really have to do anything quite that sophisticated. All you
have to do is make multiple connects to listening ports on them quickly.
Some sort of race condition. If the port scanner you're using is remotely
efficient, up it goes. I'm not surprised that they are vulnerable to more
complex attacks if their base IP stack can't even handle rapid-fire SYN
packets on different ports.
David LeBlanc
dleblanc@mindspring.com