デジタル複合機のセキュリティに関する調査報告書
Contents
1.2. QO 6 12 MFP
3. 9 E 10 159
4. 2 MEP IPA
5. MFP LAN LAN MFP
6. MFP MFP Java MFP MFP MFP
7. 7
8. MFP MFP 2 63 535
9. MFP MFP MFP
10. 6 6 17 M V 4 MFP QO
11. 0 POST hidden Referer
12. MEP MFP MFP MFP
13. MFP MFP MFP MFP MFP MFP MFP MFP
14. 1 ADE Auto Document Feeder ADF MEP ADF
15. NM
16. MFP MFP URL MFP QO
17. MFP OD MFP MFP O FP MFP
18. MFP MFP MFP MFP QO
19. 121 E 7 7 5 6
20. 6 9 ID M V 6 MFP oR MFP OO a amp
21. MFP SD
22. 6 9 ID T M V 1 MFP MFP MFP MFP ID MFP
23. 156 7 k k void mxit_show_message struct RXMsgData mx char pos int start unsigned int end int emo_ofs char ii 128 char tag 64 int img_id if mx gt got_img while pos strstr mx gt msg gt str MXIT_II_TAG NULL start Dos mx gt msg gt str emo_ofs start strlen MXIT_II_TAG end emo_ofs 1 while end lt mx gt msg gt len amp amp mx gt msg gt str end gt end if end mx gt msg gt len end of emoticon tag not found break memset ii Ox00 sizeof ii memcpy ii amp mx gt msg gt str emo_ofs end emo_ofs remove inline image tag g string erase mx gt msg start end start
24. T M V 7 MFP URL JavaScript CSRF
25. CS HDD 86
26. MFP MFP ID ME ND 0 a auetootn
27. i j MFP ID MFP MEP 45
28. 3 SQOL MFP MFP MFP MFP O CPU
29. MFP CRC 2012 5 Hirmware CRC Control panel messade Description Recommended action CODE CRC ERROR An error has occurred during a 1 Reinstall the firmware firmware 2 If the problem persists contact upgrade Support 776 Step 4
30. 6 6 14 MFP T M V 2 MFP MFP EEPROM MFP MFP
31. O MFP FP 98 6
32. MFP SDK MFP MFP SDK
33. CVSS 2 0 131 7 7 8 OS Linux MontaVista Wind River Timesys Denx OS MFP OS MFP distcc PC
34. SDK Java Sandbox SDK MFP SDK 1 MEP JRE SDK 137
35. O 60 6 6 6 T M V
36. 5 1 MFP DHCP DNS NTP ID AN 5 3 MFP 5 3 1 5 3 2
37. MFP OO SD PC URL
38. T M V SQL MFP 1
39. MFP MFP MFP MFP MFP MFP 2 MFP
40. 7 HTTP HTTP HTTP MR API API
41. MFP MFP MFP 6 9 MEP
42. OO ID 56 6 6 4 MFP T M V MFP
43. T M V MFP O ADF MFP O
44. 8 MFP 175 7
45. 5 J 2 1 E MFP E 4 o MFP MFP 21 f MFP EF CWE f
46. 6 10 T M V 3 MFP 1 MFP MFP MFP
47. MFP No ete MFP MFP wh 120 MFP
48. H 136 7 7 7 SDK 1 2 3 7 9 2
49. 2 4 MEP 7 5 CWE E http wwwr ipa_ go jp security vulnm C
50. 9 MFP Rl RAM 19 Seagate DriveTrust HDD TPM TPM TPM http www seagate com docs pdf whitepaper TP564_DriveTrust_Oct06 pdf 20
51. MFP 3 3 4 MEP 3 4 MFP 3 4 MFP MFP
52. MFP I A PSTN SIP IC TPM SIP
53. M V 7 MFP
54. 6 6 16 M V 4 MFP MFP i MFP MFP MFP
55. DNS DHCP NTP 95 6 6 16 FT T M V DNS DHCP NTP MFP
56. MFP MFP Oo 2
57. MFP MFP 3 Qc A 7 11 2 MEP MEP TCP IP
58. E 7 MFP MFP 7 2 1 5 MFP MFP
59. V MFP MFP 6 2 NO iC RO LL MFP
60. MFP MFP A TaN MFP MFP MFP MFP oO MFP MFP
61. QO 67 6 6 8 ug pl M V MFP MFP
62. 6 6 7 M V 3 MFP MFP MFP MFP MFP O
63. O 0 MFP 3 MFP MFP
64. 129 7 7 7 3 1 2 MFP 3 MFP Na 5
65. 3 QO MFP 4 MFP SD
66. MFP MFP MFP a MFP MFP OS MFP SDK MFP SDK O
67. MFP MFP MFP SNMP MFP MFP MFP ID 99 6
68. 22 3 6 2 3 6 3 3 6 4 3 6 5 3 MFP MFP MFP MFP MFP USB USB SD CF Bluetooth irDA
69. QO 82 6 6 12 MFP
70. 4 MFP MFP MFP A A HDD on S MIME MFP MFP MEP MFP
71. MFP MFP 164 7 7 13 3 1 LPR raw9100 IPP SMB SOAP WebDAV MFP MFP
72. Nd MFP MFP MFP RH DE A RE NT MFP SO ami i MFP 124 7
73. _ SD Unicode 6 7 T M V 1 MFP MFP USB USB MFP MFP
74. 6 6 13 M V 2 SQL ID MFP
75. MFP IC MFP
76. MEP MFP MFP 7 11 2 MEP SMB 2012 4 MEP MEP MFP
77. RFC MEP 2012 7 7 CVE 7 10
78. MFP MFP VLAN IPsec MFP 3 MFP Ethernet MFP
79. 161 E LPR 7 7 13 1 1 MFP LPR TCP 2 LPR STX 6 cfA001 MFP LF LPR 3 MFP 7 12 LPR
80. 6 9 ID M V 2 ID IP MFP MFP POP before SMTP POP3 IMAP4 MFP IP IP SMTP MFP MFP
81. CO MFP MFP 5 5 5 5 1 5 5 2 DHCP DNS NTP MFP
82. CVSS 2 0 a 122 7 7 6 MFP 7 11
83. 7 12 4 2012 7 7 CVE 2012 3374 http web nvd nist gov view vuln detail vulnId CVE 2012 3374 Pidgin 2012 9 Metasplont Exploit Database http www metasploit com modules 2012 3 http 7wwwr ipa go p security Yulnm documents fuzzing guide pdf 7 12 5 2 MFP
84. toX MFP USB SD Bluetooth 1 F Web 7 HDD 1 F ADE 4 5 38 4 MFP 4 5 446
85. MFP MFP MFP LPR MFP MFP
86. MFP MFP USB MFP MFP O MFP MFP 0 MFP HDD 2 MFP
87. 2 MFP UN MEFP ID 85 6 6 13 6 13
88. URL JavaScript MFP 181 7 ocatoin http poison portal example jp p poison portal example jp ocation http injection example jp p 7injection example jp
89. 7 E 7 5 E i E
90. 7 7 1 Step 1 MFP MFP remote frrmware update LPR command LPR Remote firmware update by using the LPR command NOTE This remote firmware update method is for use in Windows 2000 Service Pack 3 Windows XP Windows Server 2003 and Windows Server 2008 Complete the following steps to update the firmware by using the LPR command 1 From a command window type the following lpr P S o1 OR lpr S Pbinps where IPADDRESS can be either the TCP IP address or the hostname of the product and where
91. PJL 7 3 PJL PJL FSAPPEND FSDIRLIST FSDELETE FSDOWNLOAD FSINIT FSMKDIR FSQUERY FSUPLOAD PL MFP
92. SMTP MFP O OW 6
93. KDC Key Distribution Center 7 KDC z 7 18 Kerberos 1 KDC 2 KDC
94. CSRF CSRF 7 11 3 H 177 7 7 15 3 1 MFP 2 SSL TLS 3 MFP MFP 4 MFP
95. 62 6 6 7 T M V 1 MFP MFP MFP MFP O
96. 6 ijD ID Ssh IRO st 8 ID IP MFP ID MFP MFP ID ID MFP ID MFP
97. Python 166 7 7 13 5 LPR LPR MFP OS OS LPR NE CVSS 2 0 pe
98. MEP MFP 7 17 3 2012 1 A Backdoor in the Next Generation Active Directory http www exploit db com wp content themes exploit docs 18415 pdf Microsoft Active Directory 2004 5 NTLM ON TR NTLM 2011 12 CVE 2011 3406 Active Directory Buffer Overflow Vulnerability http web nvd nist gov view vuln detail vulnId CVE 2011 3406 2011 6 CVE 2011 1264 Active Directory Certificate Services Vulnerability http web nvd nist gov view vuln detai17vulnld CVE 2011 1264 Active Directory Certificate Services XSS
99. ID 7 ID MEP MFP ID ID MFP MFP MEP MFP
100. k 2012 F CC lt gt SSL TLS MFP p 8
101. NFS Tftpboot Gdbserver Linux MFP Linux 7 8 1 MontaVista MontaVista Linux Carrier Grade Bdition 2012 10 4 7 1 Linux
102. 9 1 3 2012 1 SHARP CLOUD SOLUTION http 7 www sharp co p print solution cloud MFP 2012 4 PageScope Mobile http 7 www konicaminolta jp aboutrelease 201270403 02 01 html MFP amp 2011 1 http enterprisezine jp iti detail 2754 2011 11 Google Dropbox http web tan forum impressrd jp e 2011 11 09 11249 198 9
103. FAX PSTN 3 1 MFP 3 1 MFP Life Ki0 MFP MEP MFP
104. 1 SA Assertion F MiM 1 0 9 2 SAML MiM i SAML MiM SG MiM 79 http 7 cve mitre org cgi bin c
105. 2 ID MFP MFP FP SSL TLS MFP SQL MFP
106. SCSI Small Computer System Interfacey IDE SATA Serial Advanced Technology Attachment IDE SAS Serial Attached SCST USB 3 8 HDD Bthernet LAN
107. MFP USB SD Wh 2 Bluetooth RI 1I F TI F VF HDD 1 F ADF 4 1 MFP 33 4 1 4 MFP 4 2 MFP MEP
108. i 7 17 2 SR NC MEP ls oo 186 1 2 3 4 T 1 7 ARP MFP BR OS B
109. Metasploit Bxploit Database 7 12 3 1 E E 7 EE Ts
110. 7 11 MEP 7 12 1 MFP 7 11
111. MFP MFP a 6 MFP IP Oo MFP ID MFP MEFP
112. USB MFP OO MFP QO MFP MFP MFP 2 MFP MFP MFP MFP
113. 50 6 6 3 6 3 T M V 1 MFP MFP MFP
114. E oo MFP 64 68 MFP MFP MFP E Microsoft Active Directory MFP Active Directory
115. MFP OS MFP MFP MFP MFP 5 MFP MFP
116. MFP MFP MFP NTP NTP 78 6 6 10
117. H CSRF H lt gt HDD HDD HDD Javascript
118. MFP MFP MFP MFP CPU MFP MFP MFP MFP MFP QO
119. RA 4 MFP ID TD
120. MFP MFP MFP MFP MFP MFP MFP 5 MFP
121. Ethernet LAN DHCP DNS NTP DHCP TP IP DNS IP DNS IP NTP MFP MFP
122. MFP MFP 96 3 6 6 16 T M V 2
123. O RSm WE MFP O MFP O 6 MFP MFP O MFP O
124. IP MFP ID 0 ID MFP MFP URL MFP MFP MFP ID ID
125. MFP O 76 Pa 3 6 6 10 T M V 2
126. HDD HDD 2 1 1 National Institute of Standards and Technology NIST CMVP IPA FIPS140 2
127. MFP MFP MFP MFP MFP
128. 25 7 7 http 7 16 119 7 1 The TECH MODE of the According to official sources from the brother of the in the same way constructed has a so called Tech Mode where a service technician or you can do some tests or adjust some additional settings 1 1 Entering and leaving the TECH MODE To enter the TECH MODE or to leave it 1 Press the key 2 on the keypad quickly enter ll ll If the menu display is configured to use a language different from English e g German French the display will change to the English language Ready instead of Bereit etc There will also be a clock displayed instead of the zoom percentage values In the end the display will look similiar like this To leave the TECH MODE just repeat the above mentioned p
129. 1 MFP QO MFP MFP 3 MFP MFP DB SQL MEP MFP DB
130. MFP MFP MFP 3D ISCS1 Blu ray HDMI JavaScript PC A I F CD SD CF PCMCIA USB IR FAX 6 7
131. MFP QO MFP 5 MFP MFP 2 A MFP 2 O MFP MFP
132. 4 MFP MFP ID OO ID 5 6
133. Novell iPrint Client 2011 12 E H CVE 31 TPA C C http www ipa go jp security awareness vendor programmingv2 contents c103 html 32 http 7 wwwr novell com ja jp documentatiommnw6p pdfdoc iprntenu7iprntenu pdf 33 CVE 2011 4186 CVE 2011 4185 CVE 2011 1708 CVE 2011 1707 CVE 2011 1706 CVE 2011 1705 CVE 2011 1704 CVE 2011 1708 CVE 2011 1702 CVE 2011 1701 CVE 2011 1700 CVE 2011 1699 141 7 7 10 3 1
134. OO SD Oo PC URL CC
135. 7 6 1 MFP MFP ID MFP MFP RR 1 MEP TP T ID MFP ID
136. H 6 3 T M V 5 MEP HDD HDD 6 MFP HDD ID MFP
137. MFP MFP 4 LPR raw9100 MFP MFP MFP LPR raw9100 MFP IP
138. CUI 11 I MEP 2 1 1 2 3 4 6 MFP
139. MFP 1 SSL TLS S MIME NTP MFP NTP MFP MPFP MFP MFP
140. ID IC MFP MEP MEP ID 37 4 MFP 4 4 4 5
141. Wat OB ID DNS DHCP NTP IPv4 IPv6 DHCP ARP ICMP ICMPv6 LLMNR Rendezvous TCP UDP UPnP DNS TELNET SNMP SMTP POP3 IMAP4 SIP FTP HTTP SMB LPR raw9100 IPP 93 6 6 15 DHCP DNS NTP EF T M V MFP DHCP DHCPv6 MFP O DHCP
142. T M V 1 MEFP MFP MFP OO SQL MFP
143. MFP MFP O MFP MFP OO MFP MFP 1
144. MFP MFP MFP O MFP MFP SDK SDK CPU
145. 63 MFP MFP 180 7 Fa Eee ee 7 16 http MFP 7 17 CSRF MFP
146. MFP MFP ON OFF MFP MFP MFP OO MFP DRAM MFP DRAM
147. MFP MFP MFP MFP 1 MFP
148. 7 5 1 MFP MEP MFP MFP
149. DRAM MEP MFP USB SD Bluetooth 4 1 F 4 oi i HDD I F ADF 446 39 4 MFP 4 6
150. 200 MFP MFP MFP MFP 22 V2 1 A 2014 6
151. MFP MFP MFP 4 USB SD 5 Bluetooth 3 7 H R 2 4 I F I F CO HDD I F
152. 4 i 5 MFP 6 7 EA MR a es P NM 7 7 4 2011 11 Exclusive Milli
153. MFP 3 MFP MFP MEFP a MFP MFP MFP MFP MFP
154. CVN MFP MFP MEP MFP MFP
155. 2011 8 SaveXML Windows vbs mof hoge SaveXML WINDOWS system32 hoge vbs UTF 87 hoge Sa
156. ID ID 7 MFP HDD MFP O MFP 0 lt
157. MFP MEP MEP MFP MFP MFP MPFP 21
158. MFP ID MFP ar QO MFP ID 70 6
159. 1 Ethernet IEEE 802 3 Ethernet IEEE 802 3 Ethernet Ethernet Ethernet 2 TP Ethernet Ethernet 145 2 9 4 34 7 Ethernet Ethernet Ethernet CVBE 2009 4537 JVNVU S512705 Ethemet
160. ID MFP ID MFP HDD HDD ID ID MFP 71 6
161. Ethernet TP HTTP IP MFP TE MFP H 144 MFP ID 7 MPFP
162. MFP ID 2 MFP SQL MFP MFP 30 30 MFP QO MFP
163. MFP MFP OS MFP MFP OS MFP
164. 12 SIP SIP Session Initiation Protocol 2 MFP SIP RTP Real time Transport Protocol SIP SIP 41 JVNDB 2009 001779 Active Directory LDAP DoS http vndb jvn jp ja contents 2009JVNDB 2009 LE html 42 JVNDB 2010 001344 MIT Kerberos kadmind http jvndb jvn jp ja contents 2010 JVNDB 2010 001844 html 43 http htpro nikkeibp co jp members NBY techsquare 20021129 8 44 http jvndb jvn jp ja contents 2011 JVNDB 2011 005032 html DoS 149
165. E USB TCP IP TCP IP IPYV4 3 MFP IPv4 E TPV6 MEFP 3 3 MFP
166. ID MFP 88 6 6 14 MFP T M V 7 MFP
167. MFP TT 1 http www ipa go p security jisec index html 2 http redtape nbcnews com news 2011 11 29 9076395 exclusive millions of printers open to devastat ing hack attack researchers say 1 3
168. 2 3 MFP OFF MFP MFP MFP
169. MFP 9 59 6 6 6 6 6 T M V 1
170. URL http https URL 7 lt script gt lt script gt HTML HTML HTTP Content Type charset Cookie Cookie HttpOnly TRACE dH 6 CSRF MFP
171. DNS DNS 6 IP IP QO IP IP IP MFP SQL
172. MEP HDD 182 HDD HDD 7 HDD HDD MFP
173. ADF MFP MFP ADF ADF MFP ADF MFP MFP 80 6 FT 6 11
174. DNS DHCP NTP By DNS DHCP NTP NR 0 MFP MFP 6 16 T M V 1 MFP MFP OO
175. USB SD MFP MEP MFP
176. 3 7 13 7 16 2 MFP MFP MFP HDD MFP MFP
177. MFP OS 1 MFP Wr 7 20 MFP GS MFP 7 MFP et md MFP OS 2 DC Linux E 1 MFP OS MFP 7 MEP 190 7
178. 1 H ID MFP os ID 2 NE OS MFP SNMP MFP SN P MFP OO 32bit 100
179. MFP Me 1 IC 3 E me 8 10m 1 RY 3 MFP MFP MFP
180. MFP 2 106 6 6 18 T M V MFP MFP MFP
181. MFP OS OS CVSS 2 0 160 7 13 7 MFP 7 2 7 2 MFP
182. 2 MFP MFP HDD HDD MFP ID MFP ADF EEPROM NVRAM MFP
183. MFP MFP MFP 3 MFP MFP MFP MFP MFP MEP MEFP MFP H MFP 1 1 MFP
184. MFP MFP MFP MFP MFP MFP MFP MFP
185. O MFP MFP MFP ID OO MFP MFP MFP
186. 7 15 MFP MFP HDD MEP MEP MFP
187. MFP MFP Ethernet LAN PSTN PHS MFP MFP MFP MFPP RU NA ON MFP 23 ok DD 3 MFP
188. Linux Linux MFP MFP OS OS 7 8 2 Linux
189. MFP 83 Pa 3 6 6 12 MFP T M V 2 MFP
190. 7 6 3 1 MFP MFP 2 MFP 3 4 5 MFP MFP 6 MEP 7
191. T M V 1 MFP MFP MFP SD PC U
192. 2 7 16 3 1 2 3 4 5 7 15 7 16 4 2009 6 CWE 852
193. 5 2 MFP 5 1 MFP 4 MFP MFP USB SD MFP MFP H MFP MFP MFP 43 5 MFP
194. RI SQL NE EA APT SQL 60 H 6 62 MFP 173 API 1 1 2 OS 7
195. 87 6 6 13 T M V MFP
196. Broadcom NetXtreme Ethernet 10 LAN SS E LAN i LAN
197. 43 227P 0 44 2 45 NAND0020S2020090080000053390080820R35553883999385 46 OSSSSRSRS3 47 6 RR EE 49 7 HiitHGDBS 5 49 2 7H1S2EISURSISE 25 2 49 6 3 sete RR A 51 64 MRR 54 6 5 iti 58 6 6 6 TRAIN OGA AINGARRROAa 62 606 8 RAR NS 67 6 9 ID 70 6l0 rE RN EN 76 86 NRX 41 80 2 1 NE 82 6 13 66028 86 6 14 MFP kk 89 6 15 DHCP DNS NTP 92 SOS2R8050S0285SRCRR2 96 6 NANA 6 18 MM 6 EHP EN JUS2 6 108 7 2 i 108 7 8 i 110 SSD SNS 115 7 5 i 119 7 6 ki 123 7 7
198. API D MFP O MFP MFP MFP O 1 000 4 MFP MFP
199. 3 7 18 MEP 3 7 19 MFP 3 7 20 MFP 3 7 21 MEP 3 7 22 MFP MFP A
200. MFP PDF 7 18 3 MEP MFP ami 1
201. MFP MFP 65 6 6 7 T M V 5
202. TPA Codenomicon AppScan Nessus Microsoft Windows Logo HTTP HTTP 52 TPA http 7 www ipa go jp security awareness vendor software html 53 TPA http wwwr ipa go jp security awareness vendor programming 54 TPA
203. 6 6 18 M V 4 MFP
204. MFP API SDK MFP MFP OO API MFP SDK MFP ID
205. MFP PJL MFP PJL MFP PJL 169 7 14 3 7 1 MFP
206. 2 sendmail 2006 10 LPR TCP IP http www atmarkit co p fwin2k win2ktips 809stdprnprt stdprnprt html Microsoft TCP IP raw9100 LPR 2007 10 US Cert Oisco IOS LPD buffer overflow vulnerabilhity VU 230505 https7 www kb cert org vuls id 230505 Cisco 1OS LPD 99 sprintfO Pd NN 2007 12 US Cert CUPS buffer overflow vulnerability VU 446897 http www kb cert org vuls id 446897 UNIX 08 Common UNIX Printing System CUPS 2010 4 Mocha W32 LPD Remote Buffer Overflow Vulnerability http www securityfocus comybid 39498 info Mocha Windows LPR LPR
207. 1IC TPM IC TPM MFP TD a MFP 2 ER a Bluetooth 1I F 1 F LT 1 1 F HDD 1 F
208. MFP 128 7 7 7 2 MFP 2012 5 SHODAN Google MFP M
209. 1 MFP 2 3 4 5 6 7 8
210. 58 6 6 5 T M V 4 MFP
211. 3 6 6 MFP 3 7 MFP 3 7 MFP DRAM Dynamic Random Access Memory CPU 1C TPM IC IC TPM Trusted Platform Module IC 24 3 MFP
212. PJL passwd txt MFP RDYMSG INQUIRE MFP MFP PJL PostScript
213. 3 3 MEFP MFP H E MFP 17 3 3 1 3 3 2 3 3 3 3 MFP 3 3 MFP MFP MEP MEP
214. MFP Kerberos MFP MFP MFP 1970 4 FP MFP NTP NTP lt ee DNS WE MFP NTP TP 2 I NTP IP
215. TCP IP VLAN MFP LAN WEP MFP ID FTP DNS DHCP NTP VLAN MFP
216. 167 7 14 7 7 14 1 PC MFP PJL Print Job Language PCL Printer Control Language PostScript MFP PJL PJL PJL MFP
217. CSRF MFP API MFP MFP MFP SDK API MFP SDK MFP MFP ID
218. 7 7 13 4 1990 8 REC 1179 Hine Printer Daemon Protocol http tools ietf org html rfc1179 IETF LPR 1998 7 LPR http 7 support apple com kb TA21876 viewlocale ja_JP amp locale ja_ JP PAP Apple AppleTalk Printer Access Protocol LPR 2000 10 LPD Vulnerabilty 1ssues http 1pd brooksnet com lpd security html 1LPR LPR 3 LPR 2001 11 CERT Advisory CA 2001 30 Multiple Vulnerabihties in lpd http wwwr cert org7advisornes CA 2001 30 html LPR Qpd
219. 7 4 2 HDD MFP SSD MFP 115 SSD 7 4 3 SSD SSD 3 7 E E MFP SSD MFP MFP SSD MFP
220. CA OCSP O 75 6 6 10 T M V
221. MFP MFP 2 MFP 3 MFP 7 10 4 2011 10 MFP http web nvd nist gov view vuln detail vulnId CVE 2011 3163 HP
222. 3 5 MFP 3 5 MFP MFP MFP MEFP USB IC MFP MFP MFP MFP MEP MFP MFP PSTN TP
223. E HDD E 7 H WN iAccept 2 kr 1 10 mfp login xml HTTP 1 1 iAccept Language ja iAccept Encoding gzip iUser Agent Mozilla 4 0 compatible MSIE 6 0 Windows NT 5 1 SV1 NET CLR i1 1 4322 NET CLR 2 0 50727 NET CLR 3 0 04506 30 NET CLR i3 0 4506 2152 NET CLR 3 5 30729 iHost 10 1 1 10 iConnection Keep Alive iCookie uatype IE lang Ja user ava test i TD aa091e8bef11f7cbf8ffS71f7fHc7fSS PDF Javascript 1i lt xxxMFP gt iZ xxxMFP gt IIIII PDF IHTTP1 1 200 OK Content Type text xml iConten Length 10000 ic2xml version 1 0 encoding UTF 8 gt 7xml stylesheet href a_environment xSl type text xs1 gt lt Lang gt Ja lt Lang gt ij lt AuthUser gt Admin lt AuthUser gt a 0 7710 1 1 10
224. 5 EE DD MFP MFP E MFP MFP 3
225. JIS SJIS EUC Unicode 1 2 PDF PostScript MFP MPFP PDF PostScrpt PostScript MFP MFP MFP MFP
226. 5 MFP 9 5 4 1 5 4 2 MN ID MFP MEP MEP
227. E QO MFP 1 FP SSL TLS S MIME MFP 9 CA ID O ID D
228. 2012 7 CVE 8 CVE http cve mitre org cve index html 9 Google MFP 14 3 MFP 3 MFP 3 1 MFP MFP 3 1 MFP MFP MFP
229. MFP 1 MFP 2 MFP 3 MFP 1 MEP MFP MFP HDD HDD 2 MFP 1 HDD HDD cdestore
230. 2014 6 V1 0 2010 8 30 MFP V2 0 2013 3 12 V2 1 2014 6 9 45 TM A 2 5 SS 7 NO SE 8 VAN RR NA NN NNN NR Na 8 2 8 128S RR 9 lt NSRR30AR6d8 16008RNRSRSHSS083R4630R6R33308382382R0883368H8SG 9 9 1 6 ik 10 RRR RN 0 12 2 1 MFP
231. MFP MFP MFP E 48 ami 6 MFP 6 1 6 1 7 D
232. 7 5 2 MFP MFP MFP MFP Q amp A MFP MFP
233. FTP FTP port FTP TCP port EFTP FTP site FTP FTP FTP cwd FTP cwd FTP put FTP get FTP FTP anonymous FTP FTP
234. DNS DHCP NTP MFP DHCP DNS IP 5 MFP MFP IP 5 NTP MFP IP DHCP DNS DHCP NTP DNS 6 ID ID
235. 2011 3 MFP http web nvd nist gov view vuln detail vulnId CVE 2011 0279 HP T 2010 5 MFP http web nvd nist gov view vuln detail vulnld CVE 2010 1558 HP e mail 2011 8 MTP http 7 web nvd nist gov view vuln detail vulnld CVE 2011 2404 HP 2010 12 MFP http web nvd nist gov view vulm detail7vulnld CVE 2010 3920 T 142
236. 193 8 8 8 1 7 MFP RNN 1 1
237. MFP MFP 7 4 123 You can also reset the NVRAM Resetting the NVRAM will clear the page count and reset the service mode settings to factory defaults On printers with a display panel you need to enter service mode to manually change the information stored in NVRAM On printers that dont have a display panel such as a there i
238. MFP MFP MFP MFP YE M P E MFP 1 CS MFP FlashRO E MFP 1
239. Oo MFP MFP API 60 5 MFP MFP MFP
240. 7 9 SMB LDAP Kerberos NTLM HTTP HTTP Basic HTTP Digest IPP HTTP SIP HTTP HTTP Digest SMTP SMTP AUTH POP before SMTP POP3 POP3 POP3 AUTH POP before SMTP IMAP4 IMAP4 MAP4 AUTHENTICATION 7 9 PDF PDE
241. OS 3 7 1 3 7 2 3 7 3 3 9 MFP MFP MFP MEP
242. A MD A TD IPA 5 f 9 1 SQL MFP 2 MEP MFP SQL SQL
243. _ MFP i Bluetooth r TD YV I F ULt E F i Wy 0 HDD I F 4 4 to XX 36 4 MFP 1 2 3 4 E 2 3 MFP ML mi Ol
244. CSRE CSRF MFP CVSS 2 0 pe 179 7 7 16 MFP MFP MFP 7 16 1
245. MFP MFP 27 3 7 4 3 7 5 3 7 6 3 MFP MFP MFP HTML JavaScript PDF MFP
246. SB USB SD Bluetooth MFP LAN Bluetooth MFP U Eg Bluetooth 10cm MFP i
247. 49 6 I MFP MFP MFP
248. 57 6 6 5 6 5 M V 1 MFP MFP MFP MFP
249. 7 14 4 2003 6 1 7 HP PCL PJL Reference Printer Job Language Technical Reference Manual http h20000 www2 hp com bc docs support SupportManual bpl113208 bpl113208 pdf HP PCL PJL 2010 3 CVE 2010 0619 http cve mitre org cgi bin cvename cgi name CVE 2010 0619 PJL INQUIRE 2010 11 HP LaserJet Directory Traversal in PJL Interface http www exploit db com exploits 15631 PJL 2012 1 Hacking MFPs PostScript um you ve been hacked http andrencostin com papers Conf2 20 2028C3 20 20Hacking 20MFPs 20 part2 20 20PostScript_um 20you_ve 20been 20hacked 20 20SRLa bs 20 20v2 pdf PostScript 2012 2 MULTIFUNCTION PRINTER VULNERABILITTES http masisac clsecurity org7resources reports documents A 0012 NCCIC 130020 120223MFPVulnerability pdf MEP 171
250. ADE 4 8 41 4 MFP 4 8 4 9 MEP MFP MFP MFP ID
251. 3 KDC 4 MFP MFP MEP
252. USB USB IPv4 Y HW IP 3 2 MFP 3 2 MFP MFP
253. IPA TCP IP AS ARP IPv4 WPA WPA2 f WEP UDP ICMP TCP Rd fo AR Er don http www soumu go jp main_sosiki joho_tsusin security enduser ippan12 htm 35 36 http 7 www net security org secworld php id 11663 146 5 6 7 TCP IP OS OS IP
254. 6 18 M V 2 MFP MFP MFP
255. 7 MIB SNMP SNMP 8 FTP FTP File Transfer Protoco HTTP FTP TCP TCP IPsec FTP SSL TLS TCP TCP MFP
256. 9 1 Directory SAML MEP Active INN MFP Active Directory 2 2002 1
257. HDD HDD MFP PC NA MR MFP HDD MFP ee E 7 3 2 MFP MEFP HDD HDD HDD ee HDD E
258. MFP MFP MD5 S MIME MFP SSL TLS RSA 512bit SSL 1024bit RSA SSL TLS MFP SSL 3 0 TLS 1 0
259. 6 MEP E MFP I i 0 o RG MFP lt E 1 5
260. 7 7 14 5 PJL PJL MFP CVSS 2 0 i 172 7 15 7 MFP MFP MFP MEP 7 15 1
261. CN MEP CT TAN MEP MFP 1 TIPA T MFP 2011 11 MFP MFP MFP MEP
262. MFP USB SCSI MFP USB USB USB MFP TCP IP DNS DHCP NTP MFP LAN WEP MFP
263. 6 SDK 7 SDK MFP 7 9 4 2003 MEAP http gijutsu jbmia or jp 03kaisetu canon pdf MEAP LU 2002 7 Vulnerability in ChaiVM EZloader http en securitylab ru notification 235126 php EZloader 2012 1 CVE 2012 0507 http cve mitre org cgi bin cvename cg17name CVE 2012 0507 JVM BOF Sandbox 138 7 7 9 5
264. 7 6 1 pa i OS MEP 5 1 RE 7
265. A I ul 2 3 NN 5 e205 EN3 6 MFP 1 1 2 1 MEP Ne MADE 1 MFP A PCC
266. T M V 4 MFP MFP ID Oo ID ID 2 MFP MFP MFP ID
267. 4 2 34 4 MFP 4 2 4 3 MFP MFP MFP MFP IC
268. 7 MFP MFP 7 9 3 1 SDK 2 SDK SDK 3 4 SDK 5 SDK
269. LPR raw9100 TPP QO SMB QO QO TWAIN QO FTP QO WebDAV QO SMTP QO POP3 QO QO IMAP4 QO QO WSD Web Service QO Discovery BMLinkS QO MFP MFP E MFP MFP
270. MFP MEP MFP MFP MFP MFP 18 3 MFP
271. QO MFP MFP MFP QO 107 7 7 1 f MFP E E MFP
272. I NR RN 6 1 7 5 16 6 3 T M
273. 1 MFP MFP SD MFP MFP QO MFP MFP MFP MFP
274. 133 7 7 8 3 1 MFP OS MFP 2 3 OS 4 ie 5 OS
275. 2007 10 PDE http 7 itpro nikkeibp co jp article NEWS 20071024 285333 PDF 2010 7 The SHARP Security Suite http files sharpusa com Downloads ForBusiness DocumentSystems MFPsPrin ters Security cop_dow_securitybro pdf MFP OS nl 2006 7 HP http 77h20424 www2 hp com program wdyhts enterpriseprint sg en pdfs whitepa per HP security_solutions pdf 192 7 nl MFP OS 2006 2 Lexmark technical white paper Security http 7 www lexmark com vgn images portal Security 20Features9 20of9 620Lex mark 20MFPs 20v1 1 pdf MFP OS nl 2009 4 Samsung MEP Security Overview http 7 www samsung com us it solutions healthcare pdf 5 MFP 20Security 2 0Overview 20RevO0A pdf
276. ARP MFP O MFP MFP MFP MFP MFP API API MFP MFP CSRF
277. FSDIRLIST 168 7 14 2 7 y 12345X PJL INFO FILESYS VOLUME TOTAL SIZE FREE SPACE LOCATION LABEL STATUS 0 2929683456 2922577920 HDD READ WRITE 12345X PJL FSDIRLIST NAME 0 ENTRY 1 COUNT 128 ENTRY 1 pjl TYPE DIR plwform TYPE DIR artform TYPE DIR seal TYPE DIR smb TYPE DIR jtpool TYPE DIR del TYPE DIR 12345X PJL FSDIRLIST NAME 0 smb ENTRY 1 COUNT 128 ENTRY 1 passwd txt TYPE FILE SIZE 243 share txt TYPE FILE SIZE 67 7 14 PJL MFP raw9100 9100 tcp passwd txt
278. MFP MFP 7 7 7 18 1 1 MFP MFP MFP 7 9 E
279. MFP MFP MFP API SDK MFP MFP O API MFP SDK MFP MFP MFP MFP MFP O MFP
280. http 7 www digitalforensic p expanel diarypro diary cg17no 399 amp continue on 2011 7 ITmedia http www itmedna co jp enterprise articles 1107 16 news001 html SSD SSD http 77wwwr intel com jp consumer Shop diy features ssd optimizer p1 htm SSD 117 7 7 4 6 MFP SSD HDD MFP SSD HDD
281. 3 6 7 MFP IDE SCSI SATA SAS USB RS232C USB VGA PC1 USB USB HDD Ethernet Bluetooth USB 3 8 MFP 3 8 MFP Ethernet HDD IDE SCSI SATA SAS USB IDE Integrated Drive Electronics
282. HDD HDD MFP 7 3 HDD SSD HDD SSD SSD MFP SSD SSD 7 4 1 SSD SSD 7 2 7 2
283. 2 MFP PJL lt 3 PJL 4 MFP PJL 5 PJL MFP 6 PJL MI FP 170
284. 5 MFP I MFP 6 MFP 7 7 15 4 2012 3 IPA 5 http www ipa go p security vulm websecurity html
285. O MFP MFP LAN MFP 2 MFP AN Psec VPN VLAN O Ethernet MEP FP MFP FP Ni DNS DHCP NTP 94 6
286. OASIS Security Services SAML TC https wwwr oasis open org committees tc home php wg_abbrev security SAML 2008 10 Formal Analysis of SAML 2 0 Web Browser Single Sign On Breaking the SAML based Single Sign On for Google Apps http www an lab it armando pub fmse9 armando pdf 199 10 MEP 10 1 MPFP HDD SSD I E MFP MMS CVE 2010 NN PU
287. http www ipa go jp security fy20 reports emb_app 55 TPA C C http www ipa go jp security awareness vendor programmingv2 contents c103 html 56 http 7 wwwr ipa go p security vulnm fuzzing html 57 Windows Logo http www microsoft com japan whdc winlogo hwrequirements msDx Windows 152 7 11 4 1 MFP 2 1 3 4 MFP 7 1 5 H
288. MFP ig 1C MFP ASA ADF
289. 153 7 2010 11 IPA TCP IP V5 0 http 7 wwwr ipa_ go p security vulnm yulm TCPIP Check html TCP ICMP IPv4 ARP IPv6 2009 11 JVNVU 120541 SSL TLS http jivn jp certJVNVU120541 SSL TLS 2009 12 CVE 2009 4537 r8169 stranghten out overlength frame detection http cve mitre org cg bin cvename cg17name CVE 2009 4537 Realtek thernet 2011 7 CVE 2011 1265 http web nvd nist gov view vulm detail vulnld CVE 2011 1265 Microsoft Bluetooth T 2012 4 CVE 2012 0475 http web nvd nist gov view vuln detail vulnId CVE 2012 0475 Mozilla IPv6 2012 5 CVE 2011 2699 http 7 web
290. MFP 2 HDD RAM ami 112 7 3 5 1 2 3
291. YF ii eo HDD 1 F 4 9 42 5 MFP 5 1 MFP 5 MFP MFP 5 1 MFP v MFP
292. 2 emo_ofs tag 64 img_id if end mx gt msg gt len break E ii g strndup amp mx gt msg gt str emo_ofs end emo_ofs remove inline
293. E 0 MA a 2 DE 3 MFP J
294. MEP OS 30 3 MEP 3 7 17 MEP MFP
295. TP MFP SMTP P SIP STP PSTN SIP HL323 10 Public Switched Telephone Networks 1 Session Initiation Protocol http wwwrietf org rfc rfc3261 txt 20 TA Terminal Adapter 3 MFP 1 TP TA PSTN IP PSTN
296. 6 6 17 6 17 M V MFP HTTP ys ID
297. MFP 1 MFP MFP AU CA 3 MFP MFP QO MFP CA MFP MFP MFP MFP
298. MFP IIC 26 MEP i MFP RS232C USB NRN 3 MFP 3 7 MFP DB
299. KEN FP I 3 V2 0 1 RE t ON Eg a 1 MFP MFP 0
300. MFP MFP MFP MFP MFP IP ID MFP MFP MEP
301. T M V gt MFP MFP MFP er i MFP MFP MFP
302. kk 127 7 8 OS i 132 7 9 SDK Software Development Kit i 136 7 10 140 7 11 144 7 12 MEP eee 156 7 13 cucina 161 7 14 _ 168 7 15 i 173 7 16 180 AGM0000008000ae0000000088086 185 7 18 ot MFP ui 189 8 RE 194 8 1 M Auciiiiieteaeinateaeianntenetanaeeaaaaa 194 8 2 0 194 8 3MFPE eS 194 9
303. DNS DHCP NTP TELNET SNMP SMTP POP3 IMAP4 SIP FTP HTTP SMB LPR raw9100 IPP 92 6 EF 6 15 DHCP DNS NTP M V 1 MFP MFP USB USB USB MFP
304. MFP 103
305. MFP ID MFP 1970 MFP MFP 1 MFP FP MFP MFP ID FP MFP
306. NO MFP i gt 7 5 4 1 MFP MFP 2 3 4 5 6 7 5 5 26
307. 135 7 7 9 SDK Software Development Kit 7 9 1 SDK MFP MFP MFP SDK MFEP SDK
308. MFP Hw E QO Dl MFP 101 6 6 17 T
309. MFP QO MFP QO 6 OS ID 7
310. MFP 5 MFP MEP MFP PDF E MFP ID MFP MFP
311. 89 6 6 14 MFP M V 1
312. DD 3 MFP 3 6 MFP a USB Ethernet IC I F Bluetooth IrDA 1F LAN 1 F I F PSTN FAX CPU CTPM MPU pp ADF 3 6 MFP MFP 3 6 1 MFP
313. MFP MFP ID MFP MFP MFP ID A B B MFP A DN CA CN MFP CA CV CA CA CA
314. SDK MFP MFP MFP MFP MEP MFP JPEG TIFF PDF MFP PDF PostScript MFP
315. MFP MFP 1
316. MFP MFP 1 SDK SDK MFP 54 6 6 4 MFP T M V MFP MFP
317. er EN LT HT B IPA 2 68 http www ipa go jp security vuln documents newattack pdf 194 1 2 3 4 5 6 7 8 8 http
318. MFP MFP TCP RESET HTTP MFP MFP
319. O 4 000 6 15 DHCP DNS NTP M V MFP MFP O ID VLAN IPv4 IPv6 DHCP ARP ICMP ICMPv6 LLMNR Rendezvous TCP UDP UPnP DNS
320. ID ID ID MFP MFP ID MFP
321. MFP MFP USB FP Bluetooth MFP IP AppleTalk IPX IP TCP raw9100 LPR HTTP FTP SMB IPP SOAP WebDAV SMTP POP3 IMAP4 SSL TLS IPsec Ethernet LAN USB Bluetooth IrDA AppleTalk IPX S MIME SMTP POP3 IMAP4 QO MFP HDD proxy MFP HDD
322. E 21 http 7 wwwr trustedcomputinggroup org developers trusted_platform_module 111 7 USB USB HDD AN 2 USB USB USB TE USB USB CMVP USB 7 3 4 HDD
323. MFP CH MFP lt Eg OO se Bluetooth 1 2 1I F DE ADF 4 3 35 4 MFP 4 3 to X 4 44 to X XX MFP FTP E MFP MFP
324. 4 MFP MFP MFP MFP ID MFP MFP MFP MFP 84 6
325. DRAM DRAM QO FlashROM MFP HDD MFP 51 6 6 3 T M V
326. MFP MFP O LAN TCP SSL TLS MFP MFP QO MFP MFP 102
327. MFP RY MFP MFP QO MFP MFP MFP 97
328. since the majority of viruses and worms exploit vulnerabilities in Windows based computers MFPs use non standard operating systems other than Windows Consequently they are immune to these viruses and Worms 7 20 MFP 7 18 2 MFP PDF Microsoft Word Microsoft Excel PDF MFP
329. 1IC TPM MFP TD MFP a 5 side USB SD Bluetooth a T F 1C i 2 7 ma ADE 4 7 40 4 MFP
330. 6 7 8 9 MFP 10 11 H MFP 12 13 7 11
331. 7 7 10 5 MFP CVSS 2 0 a 143 7 11 7 OM NR NHN MFP
332. 7 18 4 2012 2 MULTIFUNCTION PRINTER VULNERABILITTES http 77msisac cisecurity org7resources reports documents A 0012 NCCIC 130020 120223MFPVulnerabilty pdf MFP 2012 6 Malware attack spread as email from your office s HP scanner http nakedsecurity sophos comV2012707 24 malware hp scanner 2012 5 PostScript Danger Ahead http 7 hackinparis com slhdes hip2k12 Andrei PostScript9 20Danger 20Ahead pdf MFP 2011 2 2005 BlackHat USB http 7news mynav jp articles 2005708 03 blackhat47ndex html USB 2011 12 China Hackers Hit U S Chamber http online wsj com article SB1000142405297020405840457711054156853530 0 html 2012 6 http blog trendmicro co p archives 5415 2012
333. http livndb jvn jp ia contents 2007 JVNDB 2007 000295 html 49 JVNDB 2010 001471 Microsoft inetcomm dll http jvndb jvn jp ja contents 2010 JVNDB 2010 LE had TPA S MIME S MIME uny 50 IPA S MIME 1 http www ipa go p security fy12 contents smime email sec html 150 7 7 11 3 1 2 3 MFP MFP JBMIA BMLinkS MFP
334. LPR HTTP SMTP SIP IPA C C MFP
335. 42 5 1 MFP 6 1 KyET 2 ANANNKAAAANNNNNKAMSSRRRSRRRSRSRRRSDRRSN 7 2 kkk 115 7 3 i 120 7 4 MFP ee 124 7 5 LPR kl 127 7 6 i 128 7 7 SDK i 137 7 8 22 5 140 7 9 MFP 144 30 L 0566 157 0 AM NR 158 7 12 28 AAAA
336. ID MEP MFP NN MFP MFP SMTP
337. 191 7 4 MFP 5 MFP 6 MFP OS 7 MFP MFP MFP 8 OS MFP
338. ID 6 ID ID MFP 7 MFP
339. MFP 1 1 MEP E H MFP MFP 1H MFP
340. E 110 7 3 3 MFP HDD 7 HDD MFP HDD HDD HDD MFP HDD MPFP HDD H HDD MFP
341. MEP MFP MFP MFP MFP MFP a
342. MFP TP TP Ethernet IPv4 IPv6 ami 32 4 MFP 4 MFP MFP
343. 4 7 MFP MPP ID 1IC TPM MFP MEP IC 1IC ID IC TPM
344. 8 MFP MFP 7 6 4 125 7 7 6 5 MFP MPP MFP CVSS 2 0
345. MFP H MFP TCP raw9100 LPR HTTP FTP SMB WebDAV SMTP POP3 IMAP4 SSL TLS IPsec LAN USB Bluetooth IrDA Ap IP IPP SOAP Ethernet leTalk IPX MFP MFP O roxy MFP
346. 2 QO MFP MFP 20 MFP
347. MFP MFP 4 MFP HDD HDD OO l HDD 52 Pa 3 6
348. MFP Scan to Mail Scan to E Mail TI CE 9 50 to Mail 4 7 7 19 MFP MFP MFP A ne Ne to A 2011 MFP MFP
349. NTP ARP MFP NTP TP MFP NTP 6 9 MFP MFP O
350. URL CSRF 3 MFP MFP MFP MFP MFP MFP MFP 0 ID
351. WW MFP 5 MFP 61 6 6 7 T M
352. MFP 66 6 6 8 6 8 T M V
353. MFP FP ID MFP MFP ID 6 14 MFP T M V 1 SQL MFP O
354. 1 0 A Active Directory i ON E Google MC 71 Security Assertion Markup Language 72 WS Federation OpenID 196 Active Directory
355. DB DB MFP MEP DB SQL SQL DB SQOL MEFP MFP 1
356. HDD V 8 EX MFP HDD MFP RAM MFP E HDD HDD HDD HDD HDD HDD HDD
357. MEP MFP SMB NTLM i NTLM NTLMv2 SMB NetBIOS SMB TP Windows XP SP1 Windows SMB i JVNDB 2011 005032 Samba RPC
358. MFP OO MEP 1 MFP me P JTAG GDB 1 MFP E MFP lt lt ms uk P E
359. Ollydbg gdb O08 OS MFP MFP OS OS MFP MFP MFP OS MFP
360. SQL HTTP SQL MFP MFP MFP 0 MFP MFP MFP
361. ID CA MFP MFP 1 MFP QO MFP 1D MFP MP
362. M V 6 MFP ID ID ID O 7 AN ee
363. 3 4 MFP MFP MFP MFP 3 3 4 MFP 3 4 1 MFP MEP MFP 3 4 2 MFP 19
364. 51 BMTLinkS JBMTA BMLinkS http bmlinks committee jbmia or jp 151 3 7 HTTP
365. 15 3 MFP 3 2 MFP 3 2 MFP MFP MFP MFP MFP 27 HDD uH MFP
366. ID MFP ID USB SD Bluetooth ul MEFP MFP O MFP MFP ID
367. RC Bluetooth Bluetooth 2 4GHz PIN EN CAN 0 WW EO LAN LAN 128bit TCP IP I 2 1 LAN PC RI Bluetooth bE SPDUN SR 2 MFP
368. 2 2 MFP 5 3 MFP MFP IT TT MFP 3 5 MFP 3 7 MFP 2 3 MFP MFP MFP 1
369. LDAP E SSLTLS H Kerberos 4 LDAP ID LDAP LDAP JVNDB 2009 001779 Active Directory LDAP DoS 1 Kerberos JVNDB 2010 001344 MIT Kerberos kadmind DoS 11 SMB SMB Server Message Blocky CIFS SMB CIFS SMB SMB MFP
370. LPR 6 cfA001 7 13 LPR MFP LPR MFP MFP MEP MEP MFP MEP LPR LPR LPR MFP MFP LPR MPP
371. 6 18 6 E 6 18 T M V 1 MFP MFP
372. CVSS 2 0 gt 7 1 6 3 1 MFP RAM MFP CVE 109 7 3
373. MFP 68 6 6 8 T
374. MFP MFP 1IC TPM MFP 53 6 4 MFP 6 6 4 MFP M V MEFP MFP i Bb HH 4 MFP
375. E 7 15 CSRE CSRF 0 1 J PDF PDF PDF E 1 MEP 176 E
376. HDD E MFP HDD HDD DoD5220 22 M Gutmann k MN MFP MFP E 16 http www usaid gov policy ads 5007d522022m pdf 17 http www cs auckland ac nz pgut001 pubs secure_del html 18 4
377. ID fp anonymous FTP FTP anonymous FTP FTP MFP FTP 9 HTTP HTTPS HTTP MFP IPP Internet Printing Protoco
378. MFP Linux MEP OS Linux Linux
379. 1 9 9 MEP PC 4 ff 3 7 17 MFP MFP MFP SAML
380. 4 5 6 7 8 9 10 11 7 3 6 7 MFP MFP TPM PIN USB CMVP HDD MFP HDD
381. MFP OS OS MFP OS OS OS OS API OS Windows Linux VxWorks API OS MEP OS MFP USB OS MEP
382. OWASP The Open Web Application Security Project https www owasp rE php Category OWASP Guide Project The Common Attack Pattern Enumeration and Classification CAPEO http capec mitre org index html 2011 4 CVE 2011 1531 http 7 cve mitre org cgi bim cvename cg17name CVE 2011 1531 EWS 2011 4 CVE 2011 1533 http 7 cve mitre org cgi bim cvename cg17name CVE 2011 1533 2012 4 CVE 2012 1239 http cve mitre org cgi bim cvename cg17name CVE 2012 1239 178 7 7 15 5
383. ID QO ID FF IPsec DNS DHCP NTP IP MFP MFP
384. NTP MFP 5 MFP MFP NTP TP OO NTP RE 6 MFP MFP NTP NTP
385. 3 MFP MFP 69 6 ID 6 9 6 9 ID T M V MFP
386. 77 6 6 10 M V 3 MFP Cookie MFP
387. DO MEN NR A Ss 13 2 8 13 24 Asha 13 2 5 i 14 38s MO 15 9 MR 15 2 MFP RE SADR RD 16 3 3 MFP uuu 17 8 4 MER RNa 19 8 5 MEP SA EE 20 6 BI 0O Nm RRR RNN 22 MA 27 4 ME 33 2 2008 200 0 28 0 34 42 RR 35 4 8 tIX FR RRS EEE 36 MAT TT RR SA 38 SS a RO RA 39 4 6 Li 40 4 7 i 41 4 8 iii 42 MEP 43 5 1 MFP i 43 5 2 MEP
388. ID MFP MFP 0 MFP IC TPM MFP MFP 72 6 6 9 ID T M V MFP MFP MFP
389. MF 2 MFP 3 MFP i MFP 4 MFP 5 MFP 1 Of 165
390. MFP 7 11 1 N Oo EtherTalk IPX VPN 802 1x NAP NAC NEA EAP RADIUS PDF DHCP DHCPv6 NTLM LLMNR HTTP L UPnP Basic TPP HTTP LPR NTP Digest SMTP Auth POP before SMTP AUTH TELNET TIMAP4 lm TWAIN 7 9 MFP 7 9 MFP E LAN MFP
391. MFP MFP MFP MFP USB MFP Bluetooth MFP IP AppleTalk IPX MFP 63 6 6 7 T M V
392. SDK SDK MFP MFP MFP MFP MFP MFP MFP 2002
393. 0 3 MFP MFP MFP 6 OO 4 MFP MFP API
394. 3 5 TA MFP PSTN TP ITC a lt 3 5 MFP MFP MFP MFP MFP MEFP MFP MEP
395. NTP MFP NTP MFP 1 MFP MFP MFP 16bit signed unsigned 32bit MFP signed unsigned ms us MFP 2010 30 MFP MFP 2038 O MFP 32bit MFP 5 30 1
396. CVE 27 CVE 2012 1165 OpenS8L crypto asn1 asn_mimee JVNDB 2012 001801 mime_param_cmp NULL CVE 2012 0884 OpenSSL Cryptographic Message Syntax CMS JVNDB 2012 001735 PKCS 7 CVE 2012 0814 OpenSSH sshd auth options c JVNDB 2012 001739 auth_parse_options authorized_keys CVE 2012 0021 Apache HTTP Server mod_log_ config JVNDB 2011 003659 mod _log_config c log_cookie MPM C CVE 2012 116S CVE 2012 0884
397. MFEP SDK Software Development Kit SDK MFP MFP MFP 12 RICOH Developers Challenge Java http www ricoh co jp javachallenge outline Canon MEAP Java OS http www canon us technology canon_tech explanation meap html 13 FujiXerox Apeos IntegrationPlus http www fujixerox co jp solution dsp product ntegrationplus index html KonicaMinolta OpenAPI http en wikipedia org wiki Konica_ Minolta OpenAPI 28 3 MFP 3 7 7 3 7 8 3 7 9 3 7 10 3 7 11 ky DE AP Application Programming Interface SDK MFP MFP
398. CVSS Common Vulnerability Scoring System MFP CEM ISO EC 15408 Common Evaluation Methodology Common Methodology for Information Technology Security Evaluation ISO SO IEC 18045 SSD HDD Solid State Drive SLC NAND 2 1 Single Level Cell MLC NAND
399. DNS DNS DNS DNS TP DNS 2008 DKA Dan Kaminsky Attack DNS DNSSEC SNMP SNMPv3 SNMP SNMP MIB Manasement Information Base SNMP ASN 1 Abstract Syntax Notation One ASN 1 SN
400. MFP MFP FP OO MFP MFP MFP QO MFP 105
401. PC MFP MFP 69 Remote Access Trojan Remote Administration Tool Poison ivy Gh0st RAT 70 Remote Procedure Call H 195
402. 5 MFP MFP MFP MFP MFP ID MFP MFP ID MFP ID 74 6
403. MEP MFP IC MFP MFP MFP CPU MFP
404. MFP MFP 4 MFP MFP O MFP MFP MFP MFP
405. MFP MFP MFP O MFP _ MFP
406. 3 MFP 4 ISO EC 27001 3 4 3 IPA http www ipa go jp security awareness vendor programmingv2 contents c101 html Frank Swiderski BP 2005 4 TSO IEC 27001 JIS Q 27001 2006 http www isms jipdec or jp doc JIP ISMS111 21 2 pdf 12
407. 4 7 4 8 MFP MFP SSL SSH ID IC TPM MFP MFP MFP ID
408. LPR ID MFP MFP O 7 MFP MFP
409. MFP ID MFP 0 73 6 6 9 ID
410. 6 15 DHCP DNS NTP EF i M V 4 MFP NTP MFP NTP DNS
411. 2011 2 CVE 2011 0040 Active Directory SPN Validation Vulnerability http web nvd nist gov view vulnm detai17vulnTld CVE 2011 0040 DOS 187 7 17 4 7 CVSS 2 0 a 8 Dk DE 188 7 7 18 MFP
412. DD DD 2 SSD E SSD MFP MFP SSD v SSD HDD
413. 3 4 3 3 4 4 3 MFP MPP MFP MFP BEtherneet IP LAN MFP USB USB USB MFP MFP LAN VPN MEP
414. 5 0 MFP GMT 79 FT 6 6 11 6 11 M V MFP QO QO
415. 6 7 OS 8 9 7 8 4 CVE Vulnerabilities List MontaVista http www mvista com cve_vulnerabilities php MontaVista CVE SecurityFocus http 7 www securityfocus com 2009 12 Linux e1000 Driver Jumbo Frame Hand
416. 6 16 M V 5 MFP O MFP MFP ID MFP
417. NE ID ID URL HTTPS Cookie ID Cookie 5 secure ID JD Cookie
418. O ID ID O ID 81 6 12 MFP 6 T M V
419. O MFP QO QO A MFP A 0 0
420. SSD MFP SSD 24 2011 116 F 2 9th USENIX Conference on File and Storage Technologies 7 7 4 4 1 SSD MFP 2 SSD
421. idP Assertion 9 1 1 SAML idP GdP Assertion Assertion 9 9 1 Active Directory 9 1 Assertion 9 1 9 1 Assertion E
422. 9 7 LO MEP HDD MEP HDD EE eR HDD HDD HDD HDD MFP 7 3 1 HDD MFP I I
423. MFP MFP MFP S MIME SSL TLS 29 3 MFP 3 7 12 OS USB 3 7 13 3 7 14 3 7 15 3 7 16 OS MFP
424. http www st rim or jp shio winsec hibernation HDD 22 PIN Personal Identification Number 23 MODULE VALIDATION LISTS http csrc nist gov groups STM cmvp validation html http wwwipa go p security jcmvp val html 113 7 7 3 7 HDD MFP HDD OS PC MFP HDD MFP CVSS 2 0
425. 29 http devmetasploit com redmine projects framework repository entry modules exploits windows bro wser hp_easy_printer care_xmlsimpleaccessor rb 30 140 7 10 2 7 MFP MFP MEP E MFP
426. 5 1 MFP MEFP MFP 7
427. FP f TCP FIN HE ym MFP MFP VLAN 802 1x EAP DHCP DNS NTP SNMP SSH TELNET LDAP Kerberos X 509 OCSP 64
428. ID O oO ID MFP
429. MFP 3 MFP MFP MFP MFP a MFP MFP _ MFP MFP MFP MFP QO
430. MFP ID MFP 46 5 5 3 5 5 4 5 MFP MFP 1 MFP MFP MEP ee
431. SIP IP 2 SIP 7 E SIP SIP SPIM SIP 3 V2 0 13 SMTP POP3 IMAP4 TIPA STP HTTP SMTP RG IPA STP SMTP
432. Step 3 MFP MFP MFP MFP MFP MFP
433. 6 12 MFP T M V 5 MFP MFP MFP OO l MFP 6
434. CSRF CSRF MEP VPN TP 7 17 CSRF
435. PD 126 7 7 7 MFP KC MFP 2011 11 MEP
436. Y 7 E MFP E 7 14 PJL USB 66 189 1 7 14 PJL 7 5 SDK E 7 7
437. ee HDD HDD MFP MFP HDD HDD HDD MFP CVSS 2 0 a EE kN EE NN 114 7 7 4 SSD MFP
438. 1 1 HN gt 1 4 7 MFP lt ES 1mn R or MFP V1 0 MFP
439. Linux MontaVista Linux OpenSSL 27 JVNiPedia http jvndb jvn jp 132 7 Linux MFP MFP Wind River Linux Linux 3 1 3 0 4 SecurityFocus MFP
440. O ID MFP en ID CO S MIME MFP SSL TLS ID S MIME MFP
441. SSD SSD SSD SLC 10 MLC 1 SSD HDD DoD5220 22 M 3 Gutmann 35
442. Windows NT4 0 NTLM NTLM NTLM MFP Active Directory Kerberos Active Directory Kerberos 7 18 Kerberos KDC KDC Kerberos Kerberos 64 Microsoft Active Directory 65 Windows NT LAN Manager authentication 185 Kerberos
443. ID ID 91 6 EF 6 15 DHCP DNS NTP T M V 6 MFP i ID O
444. IPA 59 http 7 wwwr ipa go p security awareness vendor programmingv1 b06_01 html 157 7 12 2 7 7 12 1 E
445. O MFP VLAN Ethernet MFP VLAN MFP MFP VLAN IPsec QO MFP 2 MFP DNS MFP O MFP USB SCSI MS 0 NE
446. MEP O MFP MFP a 5 RU MEFP MFP MFP MFP SSL TLS 55 6 6 4 MFP
447. 1 3 Multiple Level Cell MFP MFP LPR TCP IP LPR MFP RFC 1179 ns 10 1 MFP
448. 3 MEP MEP MEP MFP MFP MFP 7 16 7 16 MFP
449. 163 7 7 13 2 LPR LPR LF Line Feed LPR RFC 1179 6
450. MED Multi Function Device MEP IT TT TT ISO IEC 15408 JISEC Japan Information Technology Security Evaluation and Certification Scheme D no NE i ae ep ICMVP Japan Cryptographic Module Validation Program
451. http RAT proxy CONNECT RAT CONNECT proxy VLAN AD AD VLAN 3 RPC 7 18 MFP
452. MFP E MPP 8 1 CVSS2 0 j CVSS 14 2010 1 2012 7 CVE MEP 15 http jvndb jvn jp cvss ScoreCalc2 swf lang ja amp g 1 108 7
453. MFP MFP MFP MFP MFP EE URL CSRE MFP CSRF MFP CO EN MFP HTTP MFP MFP
454. POP3 IMAP4 E E SMTP SMTP vrfy SMTP expn SMTP SMTP auth SMTP SMTP auth H SMTP EE SMTP SSL TLS IPsec SMTP SMTP APOP POP3 IMAP4 Microsoft
455. SSD SSD SSD f SSD SSD MFP SSD SSD H E 2 MFP A
456. 2 MFP API O MFP http proxy 90
457. HDD HH SN MFP MFP SSL TLS IPsec Ethernet T 30 MFP P TCP FTP SMB IPP SOAP WebDAV SMTP POP3 I LAN IrDA AppleTalk IPX ITU T raw9100 LPR HTTP AP4 USB Bluetooth
458. MFP 3 7 23 MFP 3 7 24 MFP MFP 3 7 25 MFP MFP 31 3 7 26 3 7 27 3 7 28 3 MFP
459. Rk 168 1 1 1 MFP MFP Multi Function Peripheral Multi Function Printer Multi Function Product MFP MFP MFP MPP MFP 1 2 MFP IT MFP 2
460. pa ee MFP MFP MFP MEP MFP MFP MFP MFP SDK M
461. 127 PJL 7 UPGRADBE SIZE 792990 7M PJL ENTER LANGUAGE ACL lt CR gt lt LEF gt ACL Advanced control language MFP Step 3 MEP MFP MEP
462. MFP MFP HH MFP
463. MFP 7 9 S MIME 0 SMB SMB FTP FTP HTTP HTTP SOAP
464. HDD Ethernet PCICPerpheral Components Interconnec USB MPP H MEP PCI E
465. 2 MFP MFP 1 104 6
466. MFP 2 MFP MFP MFP O PR O 2 MFP 8 ID 7 MFP mon rt S A ER ID
467. MFP LPR TCP 315 TCP LPR MFP TLPR LPR MFP LPR LPR LPR LE 0x0a LPR 7 13 LPR 162 7 ee MFP TCP 515 TCP ACK J LPR CP ACK SYN LPR MFP
468. SSD MFP MFP SSD CVSS 2 0 a 118 7 7 5 MFP MFP http
469. LPR Linux Windows VxWorks OS CPU MFP LPR MFP 7 2 MFP MEP LPR IPP raw9100 MFP MFP
470. MEP 0S OS E 3 OS
471. inetcomm dll S MIME S MIME 1 H S MIME 2 45 TPA SIP http www ipa go jp security vuln yuln_ SIPhtml 46 TPA STP V2 0 http www ipa go jp security vulm yulnm SIP Check html 47 JVNDB 2010 001891 Microsoft Windows SMTP http jvndb jvn TE 2010 001391 html Microsoft Windows SMTP 7 POP3 EW lt 3 48 JVNDB 2007 000295 APOP
472. HDD HDD HDD 2009 3 HDD http7 7homepage3 nifty com 8gatudo hddlock htm hdd HDD DOS 2008 7 Defeating Encrypted and Deniable File Systems TrueCrypt v5 1a and the Case of the Tattling OS and Applications http wwwr cs washington edu research security truecrypt pdf HDD 2012 5 CRYPTOGRAPHTIC MODULE VALIDATION PROGRAM CMVP http csrc nst gov groups STM cmvp index html FIPS140 2 CMVP 2012 8 JCMVP http www ipa go p security jcmyvp index html IPA 2009 4
473. MFP 3 S 4 SSD HDD SSD 5 SSD 6 SSD 7 SSD 8 2 9 SSD SSD MFP 7 4 5 2011 2 Reliably Erasing Data From Flash Based Solid State Drives http static usenix org events fast11 tech full_papers Wei pdf SSD 2011 NPO
474. Web WebDAV HTTP HTTP 7 15 HTTP HTTPS HTTP over SSL TLS HTTPS SSL TLS renegotiation SSL TLS 148 7 10 LDAP Kerberos LDAP Kerberos LDAP Kerberos MFP
475. 5 3 3 MFP 3 6 MFP MFP MFP 3 7 MFP MEP MFP MFP 44 5 3 4 5 4
476. FILENAME is the filename of the REU file NOTE The parameter o 1 consists of a lowercase O not a zero and a lowercase L not the numeral 1 This parameter sets the transport protocol to binary mode Press Enter on the keyboard The messages described in the section Printer messages during the firmware update appear on the control panel The download process begins and the firmware is updated on the product This can take several minutes 7 5 LPR Step 2 firrmware download 7 7 4 PRINT ME IF YOU DARE Firmware update attack and the rise of printer malware PJL
477. MEP MFP MEP MPP MFP MFP SMB HTTP FTP SMTP MEP MPP SNMP MFP
478. MFP SDK SDK CVSS 2 0 i 139 7 7 10 7 10 1 MFP MFP MFP
479. V 6 SD ID ID ID ID ID SD ID 7 MFP SD MFP
480. 1 find the image entry img_id int g hash_table_lookup mx gt session gt iimages ii if Iimg_id inline image not found so we will just skip it purple_debug_error MXIT_PLUGIN_ID inline image NOT found s n ii else insert img tag g_snprintf tag sizeof tag lt img id i gt img_id g_Sstring_insert mx gt msg start tag 7 10 128Byte i strlmem_ofs MFP OS 7 8 OS MFP OS
481. 7 7 8 2 MFP 8 3 MFP MEP H mAs MFP a PC
482. MFP ID 7 MFP MFP
483. MFP 5 4 3 5 4 4 5 MFP ID IC TPM IC TD MFP MFP URL ID HTTP POST ID
484. image tag g string erase mx gt msg start end st art 1 end of emoticon tag not found g_snprintf tag sizeof tag lt img id i gt Img_id g_String_insert mx gt msg start tag g free ii 7 11 MFP 59 1 H 158 HH 7 11 Nessus
485. imfp administrator_function cgi delete user testuser HTTP 1 1 1 ee Language ja iAccept Encoding gzip iUser Agent Mozilla 4 0 compatible MSIE 6 0 Windows NT 5 1 SV1 NET CLR 11 1 4322 NET CLR 2 0 50727 NET CLR 3 0 04506 30 NET CLR i3 0 4506 2132 NET CLR 3 5 30729 jiHost 10 1 1 10 iContent Length 78 1Connection Keep Alive iCache Control no cache Cookie uatype IE lang Ja user ava test 1 TD aa091e8bef11f7cbfSffS71f7f4c7fSS CSRF Token Ft 7 15 CSRF 7 15 2 CSRF MFP ONAN Token EE DD D
486. l H SMTP OS3 IMAP4 MFP MFP MEP MFP 5 6 EE MFP 5 6 1 MFP HH 47 MFP H 5 6 2 5 6 3 5 6 4
487. 5 2002 2 IPA I 0 SNS SNMP http www ipa go p security ciadr 20020213snmp html SNMPv1 LU 2008 SE HTTP http 7 www chuu information com security7fragile 6 html HTTP 2008 6 JVNVU 878044 SNMPv3 HMAC http jvn jp certJVNVU878044 SNMPv3 2008 7 An Illustrated Guide to the Kaminsky DNS Vulnerability http unixwiz net techtips iguide kaminsky dns vuln htm1l DKA CACHE Poisoning 2010 11 TPA TCP TP 5 http www ipa go jp security vuln vuln TCPIPhtml TCP ICMP IPv4 ARP
488. AA 162 7 13 LPR 163 7 14 PJL SO 169 15 GSRE RR lt 177 7 16 http Mui 181 7 17 CSRE ki 182 7 18 Kerberos NANAAASSSSNSSSSSSSSSSDSND SAS 186 7 19 MFP uuuuaiiiiiiiina 190 7 20 MFP uuA aussiasteseeseseeeeeeeeea 191 9 1 Active Directory lk 197 932MiMS RS RRR 198 5 1 MFP Ko 44 7 1 Linux ki 132 7 2 MFP ii 161 8 PIL
489. EP IT MFP MFP 1 1 6 MFP Multi Function Peripheral Multi Function Printer Multi Function Product SPC Scan Print Copy AIO All In One
490. FP 2 CRC Ethernet WebDAV 7 3 3
491. M V MFP ARP MFP LAN AP MFP MFP QO 3 MFP
492. MEFP MFP 2003 Windows OS MFP 2012 MFP MEP 2012 Me MFP 2 PD MFP 1 MFP
493. MFP OS 2003 10 Windows http wwwr fujixerox co p company news release 2003 0919_msblast html MEP 08 7 18 5 MFP 2003 Windows OS MFP MEFP OS MEFP CVSS 2 0 ne
494. MP 2002 HP jso 3 6 1 4 1 11 2 3 9 4 2 1 3 9 1 1 0 OD SNMP SNMPv3 SNMP SNMP SNMP RFCSS90 SNMP MIB 37 http 7 www imes bo or jp citecs 13sympo ref2 pdf 38 http www ipa go jp security ciadr 20020213snmp html 39 http securitytracker com id 1004860 40 http vn jp cert JVNVU878044 147
495. RL MFP HDD CO 2 MFP MFP DB SQL MFP ID
496. WE htm1 6 6 0 9 E 7 15 WEB 6 E CWE 7 MFP 13 2 5 BlackHat MFP
497. http jvndb jvn jp ja cwe CWE 352 html 183 7 7 16 5 CSRF MFP CVSS 2 0 a 184 1 7 17 7 7 17 1 MFP MFP
498. i 196 9 SAMIEA SS RE 196 0 CO DN OE OT 200 2 12 oo 15 83 2 MFP i 16 83 3 MFP ase 18 MEP ER 19 NSSBUMREE 022 NAKAASAAN NASNANRNURRROARRRNMRSIRUNRRR 21 8 6 MEEPS OR RT ET TR RR RN 22 8 7 MFP Lucci 24 3 8 MFP i 25 0 MEE PO RL ET 27 4 1 MFP L i 33 SNEEDERE RE RS SE EE 34 8 ER Ns 35 4 4 to OSAiisibasaad eticcadatictasdataiicdatiaiaieea 36 4 5 446 4 7 4 8 4 9
499. ling Remote Security Bypass Vulnerability http 7 www securityfocus comybid 37519 Wind River Linux 2010 3 Linux Kernel Bluetooth Sysfs File Local Privilege Escalation Vulnerability http 7 www securityfocus conmbid 38898 Wind River Linux 2010 1 Linux Kernel pv6_hop_jumboO Remote Denial of Service Vulnerabihty http www securityfocus com bid 37810 Wind River Linux 134 7 7 8 5 Linux LAN MEFP OS CVSS 2 0 ne E
500. nvd nist gov view vulr detail 7vulnld CVE 2011 2699 Linux OS IPv6 DOS 154 7 7 11 6 MFP HTTP DOS MFP CVSS 2 0 sa 155 7 7 12 MFP 7 11 MEP
501. ons of printers open to devastating hack attack researchers say http redtape msnbc msn com news 2011 11 29 9076395 exclusive millions of printers o pen to devastating hack attack researchers say MFP 2011 12 CVE 2011 4161 http web nvd nist gov view vuln detail vulnmTd CVE 2011 4161 HP MPP 2011 12 PRINT ME IF YOU DARE Firmware update attack and the rise of printer malware http ids cs columbia edu sites default files CuiPrintMelfYouDare pdf 130 7 7 7 5
502. rocedure or just wait a moment as the will leave TECH MODE automatically after some time You will recognise this by the absence of TECH MODE in the display If you normally use a different language for the display the display will revert to the configured language after leaving TECH MODE 7 3 7 5 3 MFP MFP
503. s a different procedure outlined below Older printers with a display panel e g etc Cold resetting the printer is simply a matter of EEE to ding down the turning the printer on Resetting NVRAM settings must be done manually through service mode See entering service mode Newer printers with a display panel e g etc Turn the printer off and then on When the printer begins its memory count press and hold down the and I hen release the and use the to find the Cold Reset option then press the to choose that option 7 4 MFP 7 6 2 MFP
504. v6 IPv4 32 1982 IPv6 MEP 13 IPv6 OS IPv6 CVE 2011 1 2012 7 36 OS DOS DNS DNS www example jp TP IP DNS
505. veXML WINDOWS system32 wbem mof hoge mof UTF 87 7 8 mof Windows Management Instrumentation service vbs vbs Metasploit Exploit Database MFP MFP MFP 28 MFP MEP
506. vename cg17name 2008 3891 197 9 ZH GdP Assertion 6 9 re 9 2 MiM 9 1 2 1 2 3 MiM Open Govemment Cloud consortum MFP
Download Pdf Manuals
Related Search