BID:14187

Xerox WorkCentre Pro Multiple Remote Vulnerabilities

Info

Xerox WorkCentre Pro Multiple Remote Vulnerabilities

Bugtraq ID:	14187
Class:	Unknown
CVE:
Remote:	Yes
Local:	No
Published:	Jul 07 2005 12:00AM
Updated:	Jul 07 2005 12:00AM
Credit:	The vendor reported these issues.
Vulnerable:	Xerox WorkCentre Pro Color 3545 0.001.04.504 Xerox WorkCentre Pro Color 3545 0.001.04.044 Xerox WorkCentre Pro Color 2636 0.001.04.504 Xerox WorkCentre Pro Color 2636 0.001.04.044 Xerox WorkCentre Pro Color 2128 0.001.04.504 Xerox WorkCentre Pro Color 2128 0.001.04.044

Not Vulnerable:

Discussion

Xerox WorkCentre Pro Multiple Remote Vulnerabilities

Xerox WorkCentre Pro is affected by multiple remote vulnerabilities.

These issues may allow remote attackers to gain unauthorized access to the Xerox MicroServer Web Server, carry out a denial of service attack against the MicroServer Web Server, disclose arbitrary files, and carry out HTML injection attacks against the Web interface of the device.

WorkCentre Pro Color models 2128, 2636, and 3545 running firmware versions 0.001.04.044 through 0.001.04.504 are affected by these issues.

Exploit / POC

Xerox WorkCentre Pro Multiple Remote Vulnerabilities

An exploit is not required to leverage these issues.

Solution / Fix

Xerox WorkCentre Pro Multiple Remote Vulnerabilities

Solution:
Xerox has released an advisory and a patch to address these issues. Please see the advisory in Web references for more information.

Xerox has released an advisory (XRX05-007) to address multiple issues. This advisory includes a cumulative patch (cert_P23_HTTP_Patch_AllWCP.zip) for several issues in Xerox MicroServer Web Server included with Xerox WorkCentre and WorkCentre Pro products. Please see the referenced advisory for further information.

Xerox WorkCentre Pro Color 2636 0.001.04.504