PT-2010-2306 · Xerox · Net Controller+1

Published 2010-02-04 · Updated 2011-01-06 · CVE-2010-0549

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Xerox WorkCentre 6400 System Software versions 060.070.109.11407 through 060.070.109.29510 Net Controller versions 060.079.11410 through 060.079.29310

Description The issue allows remote attackers to access the directory structure by using a crafted PostScript file.

Recommendations For Xerox WorkCentre 6400 System Software versions 060.070.109.11407 through 060.070.109.29510, update to a version outside of the affected range to resolve the issue. For Net Controller versions 060.079.11410 through 060.079.29310, update to a version outside of the affected range to resolve the issue. As a temporary workaround, consider restricting access to the PostScript file processing functionality until a patch is available.

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2010-0549

Affected Products

Net Controller

Xerox Workcentre 6400 System

References · 5

• http://vupen.com/english/advisories/2010/0208 · Vendor Advisory
• http://xerox.com/downloads/usa/en/c/cert_XRX10-001_v1.0.pdf · Vendor Advisory
• http://secunia.com/advisories/38339 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2010-0549 · Security Note
• http://securitytracker.com/id?1023500 · Note