PT-2002-2558 · Xerox · Xerox Docutech

Publicado 2002-12-31 · Atualizado 2008-09-05 · CVE-2002-1836

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Xerox DocuTech versions 6110 and 6115

Description The default configuration of the affected devices exports certain NFS shares to the world with world writable permissions. This may allow remote attackers to modify sensitive files.

Recommendations For Xerox DocuTech version 6110, restrict access to the exported NFS shares to prevent remote modification of sensitive files. For Xerox DocuTech version 6115, restrict access to the exported NFS shares to prevent remote modification of sensitive files.

Correção

Identificadores relacionados

CVE-2002-1836

Produtos afetados

Xerox Docutech

Referências · 6

• http://online.securityfocus.com/archive/1/273029 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2002-1836 · Nota de Segurança
• http://iss.net/security_center/static/9108.php · Nota
• http://online.securityfocus.com/archive/1/273089 · Nota
• http://securityfocus.com/bid/4765 · Nota
• http://totally.righteous.net/jedgar/overview_of_security.pdf · Nota