BID:13196

Xerox MicroServer Unspecified SNMP Authentication Bypass Vulnerability

Info

Xerox MicroServer Unspecified SNMP Authentication Bypass Vulnerability

Bugtraq ID:	13196
Class:	Unknown
CVE:
Remote:	Yes
Local:	No
Published:	Apr 15 2005 12:00AM
Updated:	Apr 15 2005 12:00AM
Credit:	This vulnerability was announced by the vendor.
Vulnerable:	Xerox WorkCentre Pro Color 3545 0.001.04.044 Xerox WorkCentre Pro Color 2636 0.001.04.044 Xerox WorkCentre Pro Color 2128 0.001.04.044 Xerox WorkCentre Pro 90 1.001.02.084 Xerox WorkCentre Pro 90 1.001.00.060 Xerox WorkCentre Pro 75 1.001.02.084 Xerox WorkCentre Pro 75 1.001.00.060 Xerox WorkCentre Pro 65 1.001.02.084 Xerox WorkCentre Pro 65 1.001.00.060 Xerox WorkCentre Pro 55 3.97.20.032 Xerox WorkCentre Pro 55 3.028.11.000 Xerox WorkCentre Pro 45 3.97.20.032 Xerox WorkCentre Pro 45 3.028.11.000 Xerox WorkCentre Pro 35 3.97.20.032 Xerox WorkCentre Pro 35 3.028.11.000 Xerox WorkCentre Pro 175 7.47.33.008 Xerox WorkCentre Pro 175 7.47.30.000 Xerox WorkCentre Pro 165 7.47.33.008 Xerox WorkCentre Pro 165 7.47.30.000 Xerox WorkCentre M55 4.97.20 .032 Xerox WorkCentre M55 4.97.20.025 Xerox WorkCentre M55 4.84.16.000 Xerox WorkCentre M55 2.97.20.032 Xerox WorkCentre M55 2.28.11.000 Xerox WorkCentre M45 4.97.20 .032 Xerox WorkCentre M45 4.97.20.025 Xerox WorkCentre M45 4.84.16.000 Xerox WorkCentre M45 2.97.20.032 Xerox WorkCentre M45 2.28.11.000 Xerox WorkCentre M35 4.97.20 .032 Xerox WorkCentre M35 4.97.20.025 Xerox WorkCentre M35 4.84.16.000 Xerox WorkCentre M35 2.97.20.032 Xerox WorkCentre M35 2.28.11.000 Xerox WorkCentre M35 2.028.11.000 Xerox WorkCentre M175 8.47.33.008 Xerox WorkCentre M175 8.47.30.000 Xerox WorkCentre M175 6.47.33.008 Xerox WorkCentre M175 6.47.30.000 Xerox WorkCentre M165 8.47.33.008 Xerox WorkCentre M165 8.47.30.000 Xerox WorkCentre M165 6.47.33.008 Xerox WorkCentre M165 6.47.30.000 Xerox WorkCentre 40 Color 1.2.81 Xerox WorkCentre 40 Color 01.02.65.1 Xerox WorkCentre 40 Color 01.02.077.1 Xerox WorkCentre 40 Color 01.02.058.4 Xerox WorkCentre 40 Color 01.02.053.1 Xerox WorkCentre 40 Color 01.00.060 Xerox WorkCentre 32 Color 1.2.81 Xerox WorkCentre 32 Color 01.02.077.1 Xerox WorkCentre 32 Color 01.02.058.4 Xerox WorkCentre 32 Color 01.02.053.1 Xerox WorkCentre 32 Color 01.00.060

Not Vulnerable:

Discussion

Xerox MicroServer Unspecified SNMP Authentication Bypass Vulnerability

Xerox MicroServer is prone to an unspecified authentication bypass vulnerability. Reports indicate that the vulnerability is present in the SNMP functionality of the service. It has been conjectured that the issue may be exploited by a remote attacker to gain access to sensitive information or modify SNMP strings without requiring authentication.

Exploit / POC

Xerox MicroServer Unspecified SNMP Authentication Bypass Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Solution / Fix

Xerox MicroServer Unspecified SNMP Authentication Bypass Vulnerability

Solution:
The vendor has released an advisory (XRX05_005) and an update to address this and another vulnerbaility.

Xerox has released an advisory (XRX05-007) to address multiple issues. This advisory includes a cumulative patch (cert_P23_HTTP_Patch_AllWCP.zip) for several issues in Xerox MicroServer Web Server included with Xerox WorkCentre and WorkCentre Pro products. Please see the referenced advisory for further information.

Xerox WorkCentre M175 8.47.33.008