PT-2002-2558 · Xerox · Xerox Docutech

Published 2002-12-31 · Updated 2008-09-05 · CVE-2002-1836

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Xerox DocuTech versions 6110 and 6115

Description The default configuration of the affected devices exports certain NFS shares to the world with world writable permissions. This may allow remote attackers to modify sensitive files.

Recommendations For Xerox DocuTech version 6110, restrict access to the exported NFS shares to prevent remote modification of sensitive files. For Xerox DocuTech version 6115, restrict access to the exported NFS shares to prevent remote modification of sensitive files.

Fix

Related Identifiers

CVE-2002-1836

Affected Products

Xerox Docutech

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2002-1836 · Security Note
• http://online.securityfocus.com/archive/1/273029 · Note
• http://iss.net/security_center/static/9108.php · Note
• http://online.securityfocus.com/archive/1/273089 · Note
• http://securityfocus.com/bid/4765 · Note
• http://totally.righteous.net/jedgar/overview_of_security.pdf · Note