----------------------------------------------------------------------

Want to work within IT-Security?

Secunia is expanding its team of highly skilled security experts.
We will help with relocation and obtaining a work permit.

Currently the following type of positions are available:
http://secunia.com/quality_assurance_analyst/
http://secunia.com/web_application_security_specialist/ 
http://secunia.com/hardcore_disassembler_and_reverse_engineer/

----------------------------------------------------------------------

TITLE:
Dell Color Laser Printers Multiple Vulnerabilities

SECUNIA ADVISORY ID:
SA21630

VERIFY ADVISORY:
http://secunia.com/advisories/21630/

CRITICAL:
Less critical

IMPACT:
Security Bypass, DoS

WHERE:
>From local network

OPERATING SYSTEM:
Dell Color Laser Printer 5110cn
http://secunia.com/product/11721/
Dell Color Laser Printer 5100cn
http://secunia.com/product/11733/
Dell Color Laser Printer 3110cn
http://secunia.com/product/11734/
Dell Color Laser Printer 3100cn
http://secunia.com/product/11736/
Dell Color Laser Printer 3010cn
http://secunia.com/product/11735/
Dell Color Laser Printer 3000cn
http://secunia.com/product/11737/

DESCRIPTION:
Some vulnerabilities have been reported in various Dell Color Laser
Printers, which can be exploited by malicious people to bypass
certain security restrictions or to cause a DoS (Denial of Service).

1) The embedded FTP server does not restrict the use of the FTP PORT
command. This can be exploited to connect to arbitrary systems
through the FTP server.

2) The embedded HTTP server does not authenticate certain HTTP
requests correctly. This can be exploited to make unauthorized
changes to the system configuration or to cause a DoS.

The vulnerability has been reported in Dell 5110cn, Dell 3110cn, and
Dell 3010cn with firmware versions prior to A01 and in Dell 5100cn,
Dell 3100cn, and Dell 3000cn with firmware versions prior to A05. 

NOTE: Other products using the Fuji Xerox Printing Engine may also be
affected.

SOLUTION:
Apply patches.

Dell 5110cn (firmware versions prior to A01):
http://ftp.us.dell.com/printer/R130538.EXE

Dell 3110cn (firmware versions prior to A01):
http://ftp.us.dell.com/printer/R130356.EXE

Dell 3010cn (firmware versions prior to A01):
http://ftp.us.dell.com/printer/R132075.EXE

Dell 5100cn (firmware versions prior to A05):
http://ftp.us.dell.com/printer/R132718.EXE

Dell 3100cn (firmware versions prior to A05):
http://ftp.us.dell.com/printer/R132079.EXE

Dell 3000cn (firmware versions prior to A05):
http://ftp.us.dell.com/printer/R132368.EXE

PROVIDED AND/OR DISCOVERED BY:
Nate Johnson and Sean Krulewitch, Indiana University.

ORIGINAL ADVISORY:
https://itso.iu.edu/20060824_FXPS_Print_Engine_Vulnerabilities

----------------------------------------------------------------------

About:
This Advisory was delivered by Secunia as a free service to help
everybody keeping their systems up to date against the latest
vulnerabilities.

Subscribe:
http://secunia.com/secunia_security_advisories/

Definitions: (Criticality, Where etc.)
http://secunia.com/about_secunia_advisories/


Please Note:
Secunia recommends that you verify all advisories you receive by
clicking the link.
Secunia NEVER sends attached files with advisories.
Secunia does not advise people to install third party patches, only
use those supplied by the vendor.

----------------------------------------------------------------------

Unsubscribe: Secunia Security Advisories
http://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org

----------------------------------------------------------------------