Xerox DocuShare Information Leakage Vulnerability
BID:5881
Info
Xerox DocuShare Information Leakage Vulnerability
| Bugtraq ID: | 5881 |
| Class: | Design Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Oct 03 2002 12:00AM |
| Updated: | Oct 03 2002 12:00AM |
| Credit: | Discovery credited to Ryan Purita. |
| Vulnerable: |
Xerox DocuShare 2.2 |
| Not Vulnerable: | |
Discussion
Xerox DocuShare Information Leakage Vulnerability
A vulnerability has been discovered in Xerox DocuShare v2.2.
Reportedly it is possible for an attacker to gain sensitive information about the internal network as an anonymous DocuShare user.
This information could be used by the attacker to launch further attacks against the network.
It should be noted that it is not yet known whether later versions of the software are vulnerable to this issue.
A vulnerability has been discovered in Xerox DocuShare v2.2.
Reportedly it is possible for an attacker to gain sensitive information about the internal network as an anonymous DocuShare user.
This information could be used by the attacker to launch further attacks against the network.
It should be noted that it is not yet known whether later versions of the software are vulnerable to this issue.
Exploit / POC
Xerox DocuShare Information Leakage Vulnerability
No exploit is required.
No exploit is required.
Solution / Fix
Xerox DocuShare Information Leakage Vulnerability
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
References
Xerox DocuShare Information Leakage Vulnerability
References:
References: