Ricoh Aficio 450/455 PCL Printer Remote ICMP Denial Of Service Vulnerability
BID:11932
Info
Ricoh Aficio 450/455 PCL Printer Remote ICMP Denial Of Service Vulnerability
| Bugtraq ID: | 11932 |
| Class: | Failure to Handle Exceptional Conditions |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Dec 14 2004 12:00AM |
| Updated: | Dec 14 2004 12:00AM |
| Credit: | Hongzhen Zhou <[email protected]> disclosed this vulnerability. |
| Vulnerable: |
Ricoh Aficio 455 PCL Printer Ricoh Aficio 450 PCL Printer |
| Not Vulnerable: | |
Discussion
Ricoh Aficio 450/455 PCL Printer Remote ICMP Denial Of Service Vulnerability
It is reported that Ricoh 450/455 printers are susceptible to a remote denial of service vulnerability. This issue is due to a failure of the device to properly handle exceptional ICMP packets.
Remote attackers may exploit this vulnerability to restart affected devices. Repeated packets may be utilized to sustain the condition, causing the device to repeatedly restart. Source addresses of the malicious ICMP packets may also be spoofed, reducing the likelihood of locating, or blocking access to the attacker.
Due to code reuse among devices, it is likely that other printers are also affected.
It is reported that Ricoh 450/455 printers are susceptible to a remote denial of service vulnerability. This issue is due to a failure of the device to properly handle exceptional ICMP packets.
Remote attackers may exploit this vulnerability to restart affected devices. Repeated packets may be utilized to sustain the condition, causing the device to repeatedly restart. Source addresses of the malicious ICMP packets may also be spoofed, reducing the likelihood of locating, or blocking access to the attacker.
Due to code reuse among devices, it is likely that other printers are also affected.
Exploit / POC
Ricoh Aficio 450/455 PCL Printer Remote ICMP Denial Of Service Vulnerability
An exploit is not required, however, a proof of concept packet generator has been provided by Kyong Joo, x90c <[email protected]>:
An exploit is not required, however, a proof of concept packet generator has been provided by Kyong Joo, x90c <[email protected]>:
Solution / Fix
Ricoh Aficio 450/455 PCL Printer Remote ICMP Denial Of Service Vulnerability
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
References
Ricoh Aficio 450/455 PCL Printer Remote ICMP Denial Of Service Vulnerability
References:
References:
- Ricoh Home Page (Ricoh)
- Re: RICOH Aficio 450/455 PCL 5e Printer ICMP DOS vulnerability (Hongzhen Zhou
- RICOH Aficio 450/455 PCL 5e Printer ICMP DOS vulnerability (Hongzhen Zhou