CVE-2002-1835: High severity Xerox DocuTech 6110 vulnerability
The default configuration of Xerox DocuTech 6110 and DocuTech 6115 running Solaris 8.0 has a large number of unnecessary services enabled such as RPC and sprayd, which could allow remote attackers to obtain access to the device.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Configuration
Disable the RPC service on the device: remove or comment out RPC-related entries (rpc/rpcbind/portmap) in /etc/inetd.conf or disable the rpcbind/portmap startup script, stop the running RPC service, and ensure it does not start at boot.
Xerox DocuTech 6110/6115 (Solaris 8.0) RPC service (rpcbind/portmap) = disabled - Configuration
Disable the sprayd service on the device: remove or comment the sprayd entry in /etc/inetd.conf or remove/disable its startup script, stop the sprayd daemon if running, and ensure it is not enabled on boot.
Xerox DocuTech 6110/6115 (Solaris 8.0) sprayd service = disabled
Event History
Frequently Asked Questions
What is the severity of CVE-2002-1835?
CVE-2002-1835 is considered a medium severity vulnerability due to the unnecessary services that could allow remote access.
How do I fix CVE-2002-1835?
To fix CVE-2002-1835, disable the unnecessary services such as RPC and sprayd in the default configuration.
What devices are affected by CVE-2002-1835?
CVE-2002-1835 affects Xerox DocuTech 6110 and DocuTech 6115 devices running Solaris 8.0.
What could an attacker do with CVE-2002-1835?
An attacker could exploit CVE-2002-1835 to gain remote access to the affected Xerox devices.
When was CVE-2002-1835 reported?
CVE-2002-1835 was reported in the year 2002.