PT-2005-3535 · Xerox · Document Centre+1

Published 2005-08-21 · Updated 2008-09-05 · CVE-2005-2645

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Xerox MicroServer Web Server in Document Centre versions 220 through 265 Xerox MicroServer Web Server in Document Centre version 332 Xerox MicroServer Web Server in Document Centre version 340 Xerox MicroServer Web Server in Document Centre versions 420 through 490 Xerox MicroServer Web Server in Document Centre versions 535 through 555

Description The issue allows remote attackers to bypass authentication.

Recommendations For versions 220 through 265, update to a version that includes a fix for this issue. For version 332, update to a version that includes a fix for this issue. For version 340, update to a version that includes a fix for this issue. For versions 420 through 490, update to a version that includes a fix for this issue. For versions 535 through 555, update to a version that includes a fix for this issue.

Fix

Related Identifiers

CVE-2005-2645

Affected Products

Document Centre

Xerox Microserver Web Server

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2005-2645 · Security Note
• http://xerox.com/downloads/usa/en/c/cert_XRX05_009.pdf · Vendor Advisory
• http://xerox.com/downloads/usa/en/c/cert_XRX05_008.pdf · Vendor Advisory
• http://secunia.com/advisories/16467 · Vendor Advisory
• http://securitytracker.com/id?1014720 · Note