Xerox WorkCentre LPD Requests Remote Denial of Service Vulnerability

Bugtraq ID:	36125
Class:	Failure to Handle Exceptional Conditions
CVE:
Remote:	Yes
Local:	No
Published:	Aug 25 2009 12:00AM
Updated:	Sep 01 2009 06:42PM
Credit:	Juho Ranta and Henri Lindberg
Vulnerable:	Xerox WorkCentre 7435 Xerox WorkCentre 7428 Xerox WorkCentre 7425 Xerox WorkCentre 7346 Xerox WorkCentre 7345 Xerox WorkCentre 7335 Xerox WorkCentre 7328 Xerox WorkCentre 7242 Xerox WorkCentre 7238 Xerox WorkCentre 7232 Xerox WorkCentre 7132
Not Vulnerable:

Xerox WorkCentre LPD Requests Remote Denial of Service Vulnerability

Xerox WorkCentre is prone to a remote denial-of-service vulnerability.

An attacker can exploit this issue to cause the affected device to stop responding, denying service to legitimate users.

The following Xerox products are affected:

WorkCentre 7132
WorkCentre 7232
WorkCentre 7242
WorkCentre 7238
WorkCentre 7345
WorkCentre 7346
WorkCentre 7425
WorkCentre 7428
WorkCentre 7435

Xerox WorkCentre LPD Requests Remote Denial of Service Vulnerability

The following exploit code is available:

• /data/vulnerabilities/exploits/36125.py

Xerox WorkCentre LPD Requests Remote Denial of Service Vulnerability

Solution:
The vendor has released an advisory and updates. Please see the references for details.

Xerox WorkCentre LPD Requests Remote Denial of Service Vulnerability

References:

• Xerox Homepage (Xerox)
  
• Xerox WorkCentre multiple models Denial of Service ( Louhi Networks Information Security Research)
  
• Xerox WorkCentre multiple models Denial of Service (Henri Lindberg - Smilehouse Oy )
  
• Xerox Security Bulletin XRX09-004 (Xerox)