PT-2005-3535 · Xerox · Document Centre+1

Publicado 2005-08-21 · Atualizado 2008-09-05 · CVE-2005-2645

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Xerox MicroServer Web Server in Document Centre versions 220 through 265 Xerox MicroServer Web Server in Document Centre version 332 Xerox MicroServer Web Server in Document Centre version 340 Xerox MicroServer Web Server in Document Centre versions 420 through 490 Xerox MicroServer Web Server in Document Centre versions 535 through 555

Description The issue allows remote attackers to bypass authentication.

Recommendations For versions 220 through 265, update to a version that includes a fix for this issue. For version 332, update to a version that includes a fix for this issue. For version 340, update to a version that includes a fix for this issue. For versions 420 through 490, update to a version that includes a fix for this issue. For versions 535 through 555, update to a version that includes a fix for this issue.

Correção

Identificadores relacionados

CVE-2005-2645

Produtos afetados

Document Centre

Xerox Microserver Web Server

Referências · 5

• https://nvd.nist.gov/vuln/detail/CVE-2005-2645 · Nota de Segurança
• http://securitytracker.com/id?1014720 · Nota
• http://xerox.com/downloads/usa/en/c/cert_XRX05_009.pdf · Aviso do Fabricante
• http://xerox.com/downloads/usa/en/c/cert_XRX05_008.pdf · Aviso do Fabricante
• http://secunia.com/advisories/16467 · Aviso do Fabricante