Fuji Xerox Printing Systems Embedded HTTP Server Multiple Vulnerabilities

Bugtraq ID:	19716
Class:	Input Validation Error
CVE:	CVE-2006-2113
Remote:	Yes
Local:	No
Published:	Aug 25 2006 12:00AM
Updated:	Oct 13 2006 09:49PM
Credit:	Sean Krulewitch is credited with the discovery of these vulnerabilities.
Vulnerable:	Fuji Xerox Printing Systems Co. Phaser 6201J 0 Fuji Xerox Printing Systems Co. FXPS Print Engine (OEM) 0 Fuji Xerox Printing Systems Co. DocuPrint C830 Network Option Card 0 Fuji Xerox Printing Systems Co. DocuPrint C830 0 Fuji Xerox Printing Systems Co. DocuPrint C525A Network Option Card 0 Fuji Xerox Printing Systems Co. DocuPrint C525A 0 Fuji Xerox Printing Systems Co. DocuPrint C2535A 0 Fuji Xerox Printing Systems Co. DocuPrint C1616 Network Option Card 0 Fuji Xerox Printing Systems Co. DocuPrint C1616 0 Fuji Xerox Printing Systems Co. DocuPrint 211 Network Option Card 0 Fuji Xerox Printing Systems Co. DocuPrint 211 0 Fuji Xerox Printing Systems Co. DocuPrint 181 Network Option Card 0 Fuji Xerox Printing Systems Co. DocuPrint 181 0 Dell 5110cn 0 Dell 5100cn 0 Dell 3110cn 0 Dell 3100cn 0 Dell 3010cn 0 Dell 3000cn 0
Not Vulnerable:	Fuji Xerox Printing Systems Co. Phaser 6201J 5.13 Fuji Xerox Printing Systems Co. DocuPrint C830 Network Option Card 5.13 Fuji Xerox Printing Systems Co. DocuPrint C525A Network Option Card 8.17 Fuji Xerox Printing Systems Co. DocuPrint C1616 Network Option Card 5.13 Fuji Xerox Printing Systems Co. DocuPrint 211 Network Option Card 5.13 Fuji Xerox Printing Systems Co. DocuPrint 181 Network Option Card 5.13 Dell 5110cn A01 Dell 5100cn A05 Dell 3110cn A01 Dell 3100cn A05 Dell 3010cn A01 Dell 3000cn A05

Fuji Xerox Printing Systems Embedded HTTP Server Multiple Vulnerabilities

Fuji Xerox Printing Systems (FXPS) Embedded HTTP Server is prone to authentication-bypass and denial-of-service vulnerabilities. These issues occur because the application fails to properly validate HTTP requests.

An attacker can exploit these issues to bypass authentication and gain administrative access to the affected embedded application or to cause denial-of-service conditions. This may lead to other attacks.

Fuji Xerox Printing Systems Embedded HTTP Server Multiple Vulnerabilities

Attackers can exploit this issue via a web client.

Fuji Xerox Printing Systems Embedded HTTP Server Multiple Vulnerabilities

Solution:
The vendor has released updated firmware to address these issues.

Please see the references for more information.


Fuji Xerox Printing Systems Co. DocuPrint C830 0

• Fuji Xerox Printing Systems Co. C83F0607.EXE
  http://download.fujixerox.co.jp/docuprint_c/download/830/fw.html

Fuji Xerox Printing Systems Co. Phaser 6201J 0

• Fuji Xerox Printing Systems Co. 6201N513.EXE
  http://www.fxpsc.co.jp/download/fw/fw_6201.html

Fuji Xerox Printing Systems Co. DocuPrint C525A Network Option Card 0

• Fuji Xerox Printing Systems Co. N5250817.EXE
  http://download.fujixerox.co.jp/docuprint_c/download/525a/nic_fw.html

Fuji Xerox Printing Systems Co. DocuPrint C1616 0

• Fuji Xerox Printing Systems Co. C16F0607.EXE
  http://download.fujixerox.co.jp/docuprint_c/download/1616/fw.html

Fuji Xerox Printing Systems Co. DocuPrint 181 0

• Fuji Xerox Printing Systems Co. 181F0607.EXE
  http://download.fujixerox.co.jp/docuprint/download/211series/181_firm. html

Fuji Xerox Printing Systems Co. DocuPrint C525A 0

• Fuji Xerox Printing Systems Co. C5250614.EXE
  http://download.fujixerox.co.jp/docuprint_c/download/525a/fw.html

Fuji Xerox Printing Systems Co. DocuPrint 211 0

• Fuji Xerox Printing Systems Co. 211F0607.EXE
  http://download.fujixerox.co.jp/docuprint/download/211series/211_firm. html

Fuji Xerox Printing Systems Co. DocuPrint C830 Network Option Card 0

• Fuji Xerox Printing Systems Co. C83N513.EXE
  http://download.fujixerox.co.jp/docuprint_c/download/830/nic_fw.html

Fuji Xerox Printing Systems Embedded HTTP Server Multiple Vulnerabilities

References:

• Dell Homepage (Dell)
  
• Fuji Xerox Printing Systems Co., Ltd. (FXPS) Homepage (Fuji Xerox Printing Systms Co. )
  
• ITSO Advisory: 20060824 FXPS Print Engine Vulnerabilities (ITSO)
  
• Indiana University Security Advisory: Fuji Xerox Printing Systems (FXPS) print e (Krulewitch, Sean V)