Xerox WorkCentre Products Local Authentication Bypass Vulnerability

Bugtraq ID:	16726
Class:	Access Validation Error
CVE:
Remote:	No
Local:	Yes
Published:	Feb 20 2006 12:00AM
Updated:	Feb 22 2006 04:12PM
Credit:	The vendor disclosed this vulnerability.
Vulnerable:	Xerox WorkCentre Pro 275 Xerox WorkCentre Pro 265 Xerox WorkCentre Pro 255 Xerox WorkCentre Pro 245 Xerox WorkCentre Pro 238 Xerox WorkCentre Pro 232 Xerox WorkCentre 275 Xerox WorkCentre 265 Xerox WorkCentre 255 Xerox WorkCentre 245 Xerox WorkCentre 238 Xerox WorkCentre 232
Not Vulnerable:

Xerox WorkCentre Products Local Authentication Bypass Vulnerability


Xerox WorkCentre products are susceptible to an authentication-bypass vulnerability. This issue is due to a flaw in the authentication process.

This issue allows local attackers to gain unauthorized access to the affected devices.

These versions are affected:

- WorkCentre 232, 238, 245, 255, 265, and 275
- WorkCentre Pro 232, 238, 245, 255, 265, and 275

Xerox WorkCentre Products Local Authentication Bypass Vulnerability

An exploit is not required.

Xerox WorkCentre Products Local Authentication Bypass Vulnerability

Solution:

The vendor has released System Software Version 14.027.24.015 and 13.027.24.015 to address this issue. Please contact a Xerox customer support representative for assistance with this upgrade.

Xerox WorkCentre Products Local Authentication Bypass Vulnerability

References:

• Xerox Homepage (Xerox)
  
• XEROX Security Bulletin XRX006-01 (Xerox)