Unauthorized Directory Structure Access in Xerox WorkCentre 6400 Systems
CVE-2010-0549

Currently unrated

Key Information:

Vendor
Xerox
Status
Workcentre 6400 System Software
Workcentre 6400 Net Controller
Vendor
CVE Published:
4 February 2010

Summary

A vulnerability exists in the Network Controller of the Xerox WorkCentre 6400 System Software that allows remote attackers to gain unauthorized access to the device's directory structure by exploiting specially crafted PostScript files. This can lead to potential information disclosure, putting sensitive data at risk. Users of affected versions should apply the necessary patches to mitigate the risks associated with this vulnerability.

References

http://www.securitytracker.com/id?1023500
vdb-entryx_refsource_SECTRACK
http://www.xerox.com/downloads/usa/en/c/cert_XRX10-001_v1...
x_refsource_CONFIRM
http://secunia.com/advisories/38339
third-party-advisoryx_refsource_SECUNIA

Timeline

  • Vulnerability Reserved

  • Vulnerability published

.