Secunia

Some vulnerabilities have been reported in various Dell Color Laser Printers, which can be exploited by malicious people to bypass certain security restrictions or to cause a DoS (Denial of Service).

1) The embedded FTP server does not restrict the use of the FTP PORT command. This can be exploited to connect to arbitrary systems through the FTP server.

2) The embedded HTTP server does not authenticate certain HTTP requests correctly. This can be exploited to make unauthorized changes to the system configuration or to cause a DoS.

The vulnerability has been reported in Dell 5110cn, Dell 3110cn, and Dell 3010cn with firmware versions prior to A01 and in Dell 5100cn, Dell 3100cn, and Dell 3000cn with firmware versions prior to A05.

NOTE: Other products using the Fuji Xerox Printing Engine may also be affected.

Solution
Apply patches.
Further details available in Customer Area

Provided and/or discovered by
Nate Johnson and Sean Krulewitch, Indiana University.

Original Advisory
https://itso.iu.edu/20060824_FXPS_Print_Engine_Vulnerabilities

Deep Links
Links available in Customer Area