Printer Vulnerabilities (Tektronix and JetDirect)

[aleph1 () SECURITYFOCUS COM (Elias Levy)]

I am summarizing a number of replies to the printer vulnerability
threads.

Tektronix:

Vulnerable:

Phaser 360 - Wyman Eric Miles <wymanm () is rice edu>
Phaser 840 - HC Security <securit () online no>
Phaser 780 - "Tim Adams" <TAdams () iwpsd org>

Not Vulnerable:

Phaser 360 - HC Security <securit () online no>

HP JetDirect overflow:

Not Vulnerable:

Firmware Revision G.07.17 - Jens Hektor <hektor () rz rwth-aachen de>

Vulnerable:

JetDirect 300x print server J3263A firmware H.06.00 - olivier Schott <ost () INTRINsec com>

To disable port 80 use the command:

ews-config: 0

If you are using bootp/tftp to configure your printers, you can specify an      allowed IP range in 
/tftpboot/<printer-name>.cfg, like:

        xxx.yyy.zzz.0  255.255.255.0


--
Elias Levy
Security Focus
http://www.securityfocus.com/