Vulnerability

    HP printer

Affected

    HP printer

Description

    Ben Woodard posted following about  two bugs in HP printers.   The
    first bug is their succeptability to the nestea2 and other  TCP/IP
    exploits.  The second bug only  affects HP 5m and some 5si's  with
    older formatter  firmware.   This bug  is due  to a  communication
    error between  the printer  and the  network interface.   Using  a
    simple  multivarible  SNMP  getnext  command,  you  can  crash the
    network interface causing the printer to drop off the network.

Solution

    HP  addressed  these  two  big  bugs  that allow anyone to crash a
    network connected printer.  First bug is fixed in several releases
    of firmware for their  different cards.  A05.08  is for most HP  5
    series network  printers.   This release  have been  available for
    some time but they yet to release it to their web site.  You  must
    contact their support organization and ask for it specifically.

    As for  seconf bug,  HP has  provided the  a beta firmware release
    A05.09 that addresses this issue.  If you want to get this  bugfix
    please contact HP customer care,  indicate that you are getting  a
    79 SE problem with a 5M and ask for the BETA A.05.09 release which
    cisco has.  Once they are comfortable that this firmware has  been
    tested widly without incident they will release it.