Xerox WorkCentre Crafted PostScript File Handling Directory Access (XRX10-001)

medium Nessus Plugin ID 44943

Language:

Synopsis

The remote multi-function device allows an attacker to gain access to the Network Controller directory structure without authorization.

Description

According to its model number and software version, the remote host is a Xerox WorkCentre device that could allow unauthorized access to the Network Controller directory structure using a specially crafted PostScript file.

A remote attacker may be able to leverage this to gain access to sensitive information from the affected device.

Solution

Apply the P40v1 patch as described in the Xerox security bulletin referenced above.

Plugin Details

Severity: Medium

ID: 44943

File Name: xerox_xrx10-001.nasl

Version: 1.8

Type: remote

Family: Misc.

Published: 3/1/2010

Updated: 11/15/2018

Supported Sensors: Nessus

Risk Information

VPR

Risk Factor: Low

Score: 2.7

CVSS v2

Risk Factor: Medium

Base Score: 5

Temporal Score: 3.7

Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:N/A:N

Vulnerability Information

CPE: cpe:/h:xerox:workcentre

Required KB Items: www/xerox_workcentre

Exploit Ease: No known exploits are available

Patch Publication Date: 1/22/2010

Vulnerability Publication Date: 1/22/2010

Reference Information

CVE: CVE-2010-0549

CWE: 200

Detections

Analytics