Home page logo
/

nmap-dev logo Nmap Development mailing list archives

Re: Bug Report with jetdirect printer server
From: RB <aoz.syn () gmail com>
Date: Thu, 27 Dec 2007 15:23:42 -0700

ACK.  Most printers are junk.  We have the same problem.

ACK.  Same with HP-UX 10.x and CNR on Windows running the service in
debug mode - with experiementation one can narrow it down to a small
set of triggers, sometimes even a single packet.  This is a
long-standing issue with poorly-written [usually legacy] apps that
Nmap just exposes, usually resulting in denial-of-service with the
occasional compromisable crash.

To reiterate (since I've had long arguments with UNIX greybeards and
firmware engineers that firmly believe otherwise), this is not a bug
in Nmap, it's an application bug.  Some commercial scanners have
options for 'safe' scanning, which purport to turn off the
crash-inducing behavior, but tell that to the Zebra printers and
Symbol handsets I've seen crash just because too many TCP ports were
scanned.


RB

_______________________________________________
Sent through the nmap-dev mailing list
http://cgi.insecure.org/mailman/listinfo/nmap-dev
Archived at http://SecLists.Org


  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]
AlienVault