[27610] in bugtraq
TCP/IP Printer Configuration Utility for Apple.LaserWriter
daemon@ATHENA.MIT.EDU (UkR security =?windows-1251?Q?team)
Sat Oct 26 13:04:45 2002
From: "UkR security =?windows-1251?Q?team=99?=" <cuctema@ok.ru>
To: bugtraq@securityfocus.com
Date: Sat, 26 Oct 2002 08:52:32 +0400
Message-ID: <web-31867058@backend2.aha.ru>
MIME-Version: 1.0
Content-Type: text/plain; charset="windows-1251"; format="flowed"
Content-Transfer-Encoding: 8bit
Release Date: October 26, 2002
Product : TCP/IP Printer Configuration Utility for
Apple.LaserWriter 12/640 PS
Vendor : Apple Computer, Inc. (http://www.apple.com)
Remote : Yes
Author : UkR-XblP (cuctema@ok.ru)/ UkR security team
/
About :
TCP/IP Printer Configuration Utility is the installation
and management software for
Apple.LaserWriter 12/640 PS printer.
Overview:
Device do not set a password for telnet access. As a
result, the telnet port will be
left exposed to unrestricted remote access. Remote users
with malicious intent will
be able to access the device to cause a denial of service,
or potentially monitor
printer activity to gather information that may be used to
compromise systems.
Solution:
Set the telnet password manually after setup printer.
---
Professional hosting for everyone - http://www.host.ru
