CVE-2002-1836: Medium severity Xerox DocuTech 6110 vulnerability
The default configuration of Xerox DocuTech 6110 and DocuTech 6115 exports certain NFS shares to the world with world writable permissions, which may allow remote attackers to modify sensitive files.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Configuration
Edit the device's NFS export configuration so that shares are not exported to the world; specify only the trusted host IPs or subnets allowed to mount each share.
Xerox DocuTech 6110 / DocuTech 6115 (NFS exports) exported hosts / export permissions = restrict exports to specific trusted host IPs or networks (do not export to the world) - Configuration
For each exported NFS directory on the device, remove the world-writable permission (e.g., ensure 'others' do not have write permission — remove 'o+w').
Xerox DocuTech 6110 / DocuTech 6115 (exported filesystem permissions) file/directory permission bits = remove world-write (no 'w' for others) - Compensating control
Restrict NFS access at the network perimeter: block or permit NFS-related traffic (typically TCP/UDP port 2049 and associated RPC ports) so only trusted management networks or specific IP addresses can reach the device.
- Operational
Identify and audit all NFS shares currently exported by the Xerox DocuTech 6110 / DocuTech 6115, verify none are exported to the world or are world-writable, and remove or reconfigure any shares that are.
Event History
Frequently Asked Questions
What is the severity of CVE-2002-1836?
CVE-2002-1836 has a severity rating that indicates a significant risk due to its ability to allow unauthorized modifications to sensitive files.
How do I fix CVE-2002-1836?
To fix CVE-2002-1836, reconfigure the NFS shares on Xerox DocuTech 6110 and DocuTech 6115 to restrict world writable permissions.
What systems are affected by CVE-2002-1836?
CVE-2002-1836 affects Xerox DocuTech 6110 and DocuTech 6115 printers.
How does CVE-2002-1836 impact security?
CVE-2002-1836 impacts security by allowing remote attackers to modify files, potentially leading to data loss or unauthorized access.
Is there a patch available for CVE-2002-1836?
There is no specific patch for CVE-2002-1836; however, manual reconfiguration of NFS settings is necessary to mitigate the vulnerability.