Xerox WorkCentre Crafted PostScript File Handling Directory Access (XRX10-001)
Medium Nessus Plugin ID 44943
SynopsisThe remote multi-function device allows an attacker to gain access to the Network Controller directory structure without authorization.
DescriptionAccording to its model number and software version, the remote host is a Xerox WorkCentre device that could allow unauthorized access to the Network Controller directory structure using a specially crafted PostScript file.
A remote attacker may be able to leverage this to gain access to sensitive information from the affected device.
SolutionApply the P40v1 patch as described in the Xerox security bulletin referenced above.