Search:     Advanced search
server monitoring

Discover HP JetDirect EWS Password via SNMP

Article ID: 11317
Last updated: 27 Jan, 2009
Views: 543
Posted: 22 Jan, 2009
by: Tech Pubs S.
Updated: 27 Jan, 2009
by: Tech Pubs S.

Discover HP JetDirect EWS Password via SNMP

This script is Copyright (C) 2005 - 2007 Tenable Network Security

FamilySNMP
Plugin ID11317
Bugtraq ID5331
7001
CVE IDCVE-2002-1048

Description:

Synopsis :

The administrative password of the remote HP JetDirect printer can be obtained
using SNMP.


Description :

It is possible to obtain the password of the remote HP JetDirect
web server by sending SNMP requests.

An attacker may use this information to gain administrative access
to the remote printer.

Solution :

Disable the SNMP service on the remote host if you do not use it,
or filter incoming UDP packets going to this port.

http://www.securityfocus.com/archive/1/313714/2003-03-01/2003-03-07/0

Risk factor :

High
This article was:   Helpful | Not Helpful
Prev   Next
SNMP Protocol Version Detection     SNMP VACM