Penetration Testing mailing list archives
RE: empty sa passwords on network printers ??
From: "Ben Nagy" <ben () iagu net>
Date: Sat, 10 Dec 2005 13:23:57 +0700
Not sure what you mean by SA password, but HP printers run Java, which is turing complete. If you have full access to the printer you can make it do absolutely anything you want - it's just as good (or better) as owning a workstation. Check out some of the phenoelit stuff to scare yourself: http://www.phenoelit.de/stuff/defconX.pdf Cheers, ben
-----Original Message----- From: Jason Rusch [mailto:rusch.j () gmail com] Sent: Saturday, December 10, 2005 2:51 AM To: pen-test () lists securityfocus com Subject: empty sa passwords on network printers ?? curious whats peoples opinion on the risk level etc concerning empty SA passwords on network printers? Jason P. Rusch, CISSP Sr. Information Security Administrator Infosec-rusch Tampa, FL 33619
------------------------------------------------------------------------------ Audit your website security with Acunetix Web Vulnerability Scanner: Hackers are concentrating their efforts on attacking applications on your website. Up to 75% of cyber attacks are launched on shopping carts, forms, login pages, dynamic content etc. Firewalls, SSL and locked-down servers are futile against web application hacking. Check your website for vulnerabilities to SQL injection, Cross site scripting and other web attacks before hackers do! Download Trial at: http://www.securityfocus.com/sponsor/pen-test_050831 -------------------------------------------------------------------------------
Current thread:
- empty sa passwords on network printers ?? Jason Rusch (Dec 09)
- RE: empty sa passwords on network printers ?? Ben Nagy (Dec 10)
- network printers Mark Brunner (Dec 10)
- Re: network printers Justin (Dec 12)
- Re: network printers perrymonj (Dec 13)
- Re: network printers Paul Asadoorian (Dec 13)
- Re: network printers Jason Baeder (Dec 13)
- network printers Mark Brunner (Dec 10)
- Re: network printers Sean Peterson (Dec 16)
- RE: empty sa passwords on network printers ?? Ben Nagy (Dec 10)