SEH IC9 Pocket Print Server Web Administrative Interface Password Denial Of Service Vulnerability

Bugtraq ID:	5329
Class:	Boundary Condition Error
CVE:	CVE-2002-1067
Remote:	Yes
Local:	No
Published:	Jul 27 2002 12:00AM
Updated:	Jul 11 2009 02:56PM
Credit:	Vulnerability discovery credited to FX <[email protected]> and kim0 <[email protected]>.
Vulnerable:	SEH IC9 7.1 .36 SEH IC9 7.1 .30
Not Vulnerable:

SEH IC9 Pocket Print Server Web Administrative Interface Password Denial Of Service Vulnerability

IC9 is the Pocket Print Server distributed by SEH. It provides network capability to parallel port printers.

A user accessing the web administration interface of a vulnerable device may be able to reboot the print server, and attached printer. By sending an administrative password of 300 or more bytes, it is possible for a remote user to cause a crash in the print server. This results in a denial of service, as the print server and printer are unavailable during the reboot process.

SEH IC9 Pocket Print Server Web Administrative Interface Password Denial Of Service Vulnerability

This vulnerability may be exploited with a web browser.

SEH IC9 Pocket Print Server Web Administrative Interface Password Denial Of Service Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

SEH IC9 Pocket Print Server Web Administrative Interface Password Denial Of Service Vulnerability

References:

• 0815 ++ */ SEH_Web (Phenoelit Group)