CVE-2010-0549: Infoleak

Published Feb 4, 2010

Updated

Unspecified vulnerability in the Network Controller in Xerox WorkCentre 6400 System Software 060.070.109.11407 through 060.070.109.29510, and Net Controller 060.079.11410 through 060.079.29310, allows remote attackers to access "directory structure" via a crafted PostScript file, aka "Unauthorized Directory Structure Access Vulnerability."

Affected Software

4 affected components

Xerox WorkCentre 6400 System Software=060.070.109.11407

Xerox Workcentre 6400 Net Controller=060.079.11410

Xerox Workcentre 6400 Net Controller=060.079.29310

Xerox WorkCentre 6400 System Software=060.070.109.29510

Remediation

Patch Available

http://www.xerox.com/downloads/usa/en/c/cert_XRX10-001_v1.0.pdf

Event History

Feb 4, 2010

CVE Published

via MITRE·07:00 PM

Data Sourced

via MITRE·07:00 PM

Description

Data Sourced

via NVD·08:15 PM

RemedyDescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2010-0549?

CVE-2010-0549 is classified as a medium severity vulnerability due to the potential for unauthorized access to directory structures.

How do I fix CVE-2010-0549?

To fix CVE-2010-0549, update the Xerox WorkCentre 6400 System Software or Net Controller to the latest available version as recommended by the vendor.

What is the impact of CVE-2010-0549?

The impact of CVE-2010-0549 allows remote attackers to manipulate and access sensitive directory structures through specially crafted PostScript files.

Which products are affected by CVE-2010-0549?

CVE-2010-0549 affects Xerox WorkCentre 6400 System Software versions 060.070.109.11407 through 060.070.109.29510, and Net Controller versions 060.079.11410 through 060.079.29310.

What type of vulnerability is CVE-2010-0549?

CVE-2010-0549 is an unspecified vulnerability that involves unauthorized access related to crafted PostScript files.