Secunia

A vulnerability has been reported in Canon GP300, which can be exploited to cause a DoS (Denial of Service) on a vulnerable print server.

The vulnerability is caused due to an error in the web interface. This can be exploited to crash the print server by sending a HTTP request not containing a protocol parameter specifying the HTTP version (eg. "HTTP/1.0").

Example:
GET /

The vulnerability has been reported in Canon GP300 using WebSpooler v4.5.062 (fr). However, other versions may also be affected.

Solution
Filter traffic to the HTTP service allowing only approved IP addresses to connect.

Provided and/or discovered by
Douhine Davy

Deep Links
Links available in Customer Area