Lexmark Network Printer HTTP Server Denial Of Service Vulnerability
BID:10765
Info
Lexmark Network Printer HTTP Server Denial Of Service Vulnerability
| Bugtraq ID: | 10765 |
| Class: | Boundary Condition Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Jul 20 2004 12:00AM |
| Updated: | Jul 20 2004 12:00AM |
| Credit: | Peter Kruse <[email protected]> disclosed this vulnerability. |
| Vulnerable: |
Lexmark T522 Network Printer |
| Not Vulnerable: | |
Discussion
Lexmark Network Printer HTTP Server Denial Of Service Vulnerability
Several Lexmark network printers that contain a built-in web server have been reported to contain a buffer overflow vulnerability.
This vulnerability is reported to exist in the printers HTTP header parsing code.
The vulnerability can be exploited to crash the printers web server, denying service to legitimate users. The possibility to execute arbitrary code on the printer may also be present.
Model T522 was reported to be affected by this vulnerability. Due to code sharing across products, other printer models are likely affected as well. It is reported that some Dell branded printers also use the same firmware, implying that other vendors may also be vulnerable.
This BID will be updated with further vendor, model, and version information as new information is disclosed.
It is conjectured that this BID is related to BID 1290. Lexmark printers may use a vulnerable version of the Allegro RomPager embedded web server.
Several Lexmark network printers that contain a built-in web server have been reported to contain a buffer overflow vulnerability.
This vulnerability is reported to exist in the printers HTTP header parsing code.
The vulnerability can be exploited to crash the printers web server, denying service to legitimate users. The possibility to execute arbitrary code on the printer may also be present.
Model T522 was reported to be affected by this vulnerability. Due to code sharing across products, other printer models are likely affected as well. It is reported that some Dell branded printers also use the same firmware, implying that other vendors may also be vulnerable.
This BID will be updated with further vendor, model, and version information as new information is disclosed.
It is conjectured that this BID is related to BID 1290. Lexmark printers may use a vulnerable version of the Allegro RomPager embedded web server.
Exploit / POC
Lexmark Network Printer HTTP Server Denial Of Service Vulnerability
An exploit is not required to crash the printers web server. A proof-of-concept request sufficient to crash the device was provided:
GET / HTTP/1.0\r\nHost:AAAAAA[1024]\r\n\r\n
Another proof-of-concept perl script was provided by Eric Sesterhenn / snakebyte <[email protected]>.
An exploit is not required to crash the printers web server. A proof-of-concept request sufficient to crash the device was provided:
GET / HTTP/1.0\r\nHost:AAAAAA[1024]\r\n\r\n
Another proof-of-concept perl script was provided by Eric Sesterhenn / snakebyte <[email protected]>.
Solution / Fix
Lexmark Network Printer HTTP Server Denial Of Service Vulnerability
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
References
Lexmark Network Printer HTTP Server Denial Of Service Vulnerability
References:
References:
- BID 1290: Allegro RomPager Malformed URL Request DoS Vulnerability (SecurityFocus)
- Lexmark Homepage (Lexmark)
- Denial of Service vulnerability in several Lexmark HTTP servers ("Peter Kruse"
- Re: Denial of Service vulnerability in several Lexmark HTTP servers (Eric Sesterhenn / snakebyte