Multiple Lexmark Laser Printers HTTP 'Authorization' Header Remote Denial of Service Vulnerability
BID:39967
Info
Multiple Lexmark Laser Printers HTTP 'Authorization' Header Remote Denial of Service Vulnerability
| Bugtraq ID: | 39967 |
| Class: | Failure to Handle Exceptional Conditions |
| CVE: |
CVE-2010-0101 |
| Remote: | Yes |
| Local: | No |
| Published: | Apr 26 2010 12:00AM |
| Updated: | Apr 26 2010 12:00AM |
| Credit: | Lexmark |
| Vulnerable: |
Lexmark X94x NC.NPS.N129 Lexmark X94x LC.BR.P049 Lexmark X86x NR.APS.N332 Lexmark X86x LP.SP.P112 Lexmark X85x NC2.NPS.N222 Lexmark X85x LC4.BE.P457 Lexmark X782e NC2.NPS.N222 Lexmark X782e LC2.TO.P305c Lexmark X772e NC2.NPS.N222 Lexmark X772e LC.TR.P275 Lexmark X73x NR.APS.N447a Lexmark X73x LR.FL.P224b Lexmark X65x NR.APS.N447a Lexmark X65x LR.MN.P224a Lexmark X64xef NC2.NPS.N222 Lexmark X64xef LC2.TI.P305a Lexmark X646 NC2.NPS.N222S Lexmark X646 LC2.MC.P307a Lexmark X644 NC2.NPS.N222S Lexmark X644 LC2.MC.P307a Lexmark X642 NC2.NPS.N222 Lexmark X642 LC2.MB.P307b Lexmark X546 NR.APS.N448 Lexmark X546 LL.EL.P424 Lexmark X544 NR.APS.N448 Lexmark X544 LL.EL.P424 Lexmark X543 NR.APS.N448 Lexmark X543 LL.EL.P424 Lexmark X46x NR.APS.N447a Lexmark X46x LR.BS.P224a Lexmark X422 GN.AQ.P202 Lexmark X36x NR.APS.N448 Lexmark X36x LL.BZ.P424 Lexmark X34x 401.ec4 Lexmark X26x NR.APS.N448 Lexmark X26x LL.BZ.P424 Lexmark X20x NM.APS.N048 Lexmark X20x LM1.MT.P110h Lexmark W850 NR.APS.N332 Lexmark W850 LP.JB.P108WS Lexmark W840 NS.NP.N118 Lexmark W840 LS.HA.P121 Lexmark T656 NR.APS.N402 Lexmark T656 LSJ.SJ.P019 Lexmark T654 NR.APS.N447a Lexmark T654 LR.JP.P224a Lexmark T652 NR.APS.N447a Lexmark T652 LR.JP.P224a Lexmark T650 NR.APS.N447a Lexmark T650 LR.JP.P224a Lexmark T64x NS.NP.N219 Lexmark T64x LS.ST.P240 Lexmark T430 JX.JU.P101 Lexmark N8130 NR.APS.N368 Lexmark N8120 NR.APS.N368 Lexmark N70xxe LC.CO.N054 Lexmark N4050e GO.GO.N106 Lexmark N4000 PH2.ME.N134 Lexmark E462 NR.APS.N447a Lexmark E462 LR.LBH.P224cWS Lexmark E460 NR.APS.N447a Lexmark E460 LR.LBH.P224a Lexmark E450 NM.NA.N098a Lexmark E450 LM.SZ.P113vcREF Lexmark E360dn NR.APS.N448 Lexmark E360dn LL.LBM.P424 Lexmark E360d NR.APS.N448 Lexmark E360d LL.LBL.P424 Lexmark E350 LE.PH.P121 Lexmark E34x BR.H.P204 Lexmark E33x 141.C09 Lexmark E260 NR.APS.N448 Lexmark E260 LL.LBL.P424 Lexmark E250 LE.PM.P121 Lexmark E240n BR.Q.P204 Lexmark E240 BR.M.P204 Lexmark E23x 141.C09 Lexmark E238 BR.M.P204 Lexmark E120 LE.UL.P040 Lexmark C935dn NC.NPS.N129 Lexmark C935dn LC.JO.P051 Lexmark C920 NS.NP.N219 Lexmark C920 LS.TA.P127 Lexmark C78x NC2.NPS.N222 Lexmark C78x LC.IO.P165a Lexmark C77x NCC.NPS.N107 Lexmark C77x LC.CM.P027b Lexmark C73x NR.APS.N447a Lexmark C73x LR.SK.P224a Lexmark C546 NR.APS.N448 Lexmark C546 LU.AS.P424 Lexmark C544 NR.APS.N448 Lexmark C544 LL.AS.P424 Lexmark C543 NR.APS.N448 Lexmark C543 LL.AS.P424 Lexmark C540 NR.APS.N448 Lexmark C540 LL.AS.P424 Lexmark C53x NSF.NP.N026 Lexmark C53x LS.SW.P026avc Lexmark C52x NS.NP.N219 Lexmark C52x LS.FA.P129 Lexmark C510 891.004 Lexmark 25xxN NCL.NA.N104 Lexmark 25xxN LCL.CU.P105 |
| Not Vulnerable: |
Lexmark X94x NC.NPS.N129S Lexmark X94x LC.BR.P051HDs Lexmark X86x NP.APS.N332a Lexmark X86x LP.SP.P311e Lexmark X85x NC2.NPS.N222S Lexmark X85x LC4.BE.P457S Lexmark X782e NC2.NPS.N222S Lexmark X782e LC2.TO.P305cS Lexmark X772e NC2.NPS.N222S Lexmark X772e LC2.TR.P275S Lexmark X73x NR.APS.N447b Lexmark X73x LR.FL.P311e Lexmark X65x NR.APS.N447b Lexmark X65x LR.MN.P311e Lexmark X64xef NC2.NPS.N222S Lexmark X64xef LC2.TI.P305aS Lexmark X646 NC2.NPS.N222S Lexmark X646 LC2.MC.P307aS Lexmark X644 NC2.NPS.N222S Lexmark X644 LC2.MC.P307aS Lexmark X642 NC2.NPS.N222S Lexmark X642 LC2.MB.P307bS Lexmark X546 NR.APS.N449 Lexmark X546 LL.EL.P429a Lexmark X544 NR.APS.N449 Lexmark X544 LL.EL.P429a Lexmark X543 NR.APS.N449 Lexmark X543 LL.EL.P429a Lexmark X46x NR.APS.N447b Lexmark X46x LR.BS.P311e Lexmark X36x NR.APS.N449 Lexmark X36x LL.BZ.P429a Lexmark X26x NR.APS.N449 Lexmark X26x LL.BZ.P429a Lexmark X20x NM.APS.N049 Lexmark X20x LM1.MT.P214 Lexmark W850 NP.APS.N332a Lexmark W850 LP.JB.P311e Lexmark W840 NS.NP.N118S Lexmark W840 LS.HA.P121S Lexmark T656 NR.APS.N402S Lexmark T656 LSJ.SJ.P019S1 Lexmark T654 NR.APS.N447b Lexmark T654 LR.JP.P311e Lexmark T652 NR.APS.N447b Lexmark T652 LR.JP.P311e Lexmark T650 NR.APS.N447b Lexmark T650 LR.JP.P311e Lexmark T64x NS.NP.N219S Lexmark T64x LS.ST.P240S Lexmark N8130 NR.APS.447c Lexmark N8120 NR.APS.447c Lexmark N70xxe LC.CO.N069 Lexmark N4050e GO.GO.N206 Lexmark N4000 LC.MD.P012d Lexmark E462 NR.APS.N447b Lexmark E462 LR.LBH.P311e Lexmark E460 NR.APS.N447b Lexmark E460 LR.LBH.P311e Lexmark E450 NM.NA.N098aS Lexmark E450 LM.SZ.P113vcREs Lexmark E360dn NR.APS.N449 Lexmark E360dn LL.LBM.P429a Lexmark E360d NR.APS.N449 Lexmark E360d LL.LBL.P429a Lexmark E260 NR.APS.N449 Lexmark E260 LL.LBL.P429a Lexmark C935dn NC.NPS.N129S Lexmark C935dn LC.JO.P051S Lexmark C920 NS.NP.N219S Lexmark C920 LS.TA.P127S Lexmark C78x NC2.NPS.N222S Lexmark C78x LC.IO.P165aS Lexmark C77x NCC.NPS.N107S Lexmark C77x LC.CM.P027bS Lexmark C73x NR.APS.N447b Lexmark C73x LR.SK.P311e Lexmark C546 NR.APS.N449 Lexmark C546 LU.AS.P429a Lexmark C544 NR.APS.N449 Lexmark C544 LL.AS.P429a Lexmark C543 NR.APS.N449 Lexmark C543 LL.AS.P429a Lexmark C540 NR.APS.N449 Lexmark C540 LL.AS.P429a Lexmark C53x NSF.NP.N026S Lexmark C53x LS.SW.P026avcS Lexmark C52x NS.NP.N219S Lexmark C52x LS.FA.P129S Lexmark 25xxN NCL.NA.N105 Lexmark 25xxN LC.CU.P106 |
Discussion
Multiple Lexmark Laser Printers HTTP 'Authorization' Header Remote Denial of Service Vulnerability
Multiple Lexmark laser printers are prone to a remote denial-of-service vulnerability because the devices fail to handle crafted HTTP requests.
Exploiting this issue allows remote attackers to crash the affected device, resulting in a denial-of-service condition.
Multiple Lexmark laser printers are prone to a remote denial-of-service vulnerability because the devices fail to handle crafted HTTP requests.
Exploiting this issue allows remote attackers to crash the affected device, resulting in a denial-of-service condition.
Exploit / POC
Multiple Lexmark Laser Printers HTTP 'Authorization' Header Remote Denial of Service Vulnerability
Attackers can exploit this issue with readily available tools.
Attackers can exploit this issue with readily available tools.
Solution / Fix
Multiple Lexmark Laser Printers HTTP 'Authorization' Header Remote Denial of Service Vulnerability
Solution:
Updates are available. Please see the references for more information.
Solution:
Updates are available. Please see the references for more information.
References
Multiple Lexmark Laser Printers HTTP 'Authorization' Header Remote Denial of Service Vulnerability
References:
References: