PT-2005-3537 · Xerox · Document Centre 490+8

Published 2005-08-21 · Updated 2008-09-05 · CVE-2005-2647

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Xerox MicroServer Web Server versions in Document Centre 220 through 265 Xerox MicroServer Web Server versions in Document Centre 332 and 340 Xerox MicroServer Web Server versions in Document Centre 420 through 490 Xerox MicroServer Web Server versions in Document Centre 535 through 555

Description The issue is related to a cross-site scripting (XSS) vulnerability, which allows remote attackers to inject arbitrary web script or HTML, thereby modifying web pages. The exact vectors used for the attack are not specified.

Recommendations For versions in Document Centre 220 through 265, update to a version that includes a fix for this issue. For versions in Document Centre 332 and 340, update to a version that includes a fix for this issue. For versions in Document Centre 420 through 490, update to a version that includes a fix for this issue. For versions in Document Centre 535 through 555, update to a version that includes a fix for this issue.

Fix

Related Identifiers

CVE-2005-2647

Affected Products

Document Centre 220

Document Centre 265

Document Centre 332

Document Centre 340

Document Centre 420

Document Centre 490

Document Centre 535

Document Centre 555

Xerox Microserver Web Server

References · 5

• http://xerox.com/downloads/usa/en/c/cert_XRX05_009.pdf · Vendor Advisory
• http://xerox.com/downloads/usa/en/c/cert_XRX05_008.pdf · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2005-2647 · Security Note
• http://secunia.com/advisories/16467 · Vendor Advisory
• http://securitytracker.com/id?1014720 · Note