Support News

LPRng or JetDirect vulnerability

Posted: 2001-04-05 07:22:20   Expiration: 2001-04-05 07:22:20

Disclaimer: This news item was originally posted on 2001-04-05 07:22:20. Its content may no longer be timely or accurate.

A number of reports of HP laser printers spitting out garbage output pages were verified by BadgIRT. If a customer wants DOIT's help resolving the issue, escalate the case to USS. See doc 382 for handling info.

BadgIRT is aware of an issue in which hackers on the Internet may be scanning the UW-Madison networks looking for vulnerable computers. Specifically, hackers may be scanning for the LPRng bug, in part, found linux RedHat 7.0 boxes (

This scanning has the side effect of causing some printers with tcpip stacks to produce garbage output sometimes causing a large volume of blank pages. The output typically contains one line of text, maybe containing the words "security".

If assistance is needed in locking down the printers, please contact the DoIT Delp Desk.

-- Jeff Savoy