HP JetDirect printers allow remote attackers to obtain the administrative password for the (1) web and (2) telnet services via an SNMP request to the variable (.iso.3.6.1.4.1.11.2.3.9.4.2.1.3.9.1.1.0.
http://www.securityfocus.com/bid/5331
http://www.kb.cert.org/vuls/id/377003
http://www.iss.net/security_center/static/9693.php
http://archives.neohapsis.com/archives/bugtraq/2002-07/0345.html