Secunia

J.A. Gutierrez has reported a vulnerability in the Xerox Document Centre, which can be exploited by malicious people to gain knowledge of sensitive information.

The included web server software (identified as "Xerox_MicroServer/Xerox11") does not perform proper input validation, which can be exploited to conduct directory traversal attacks.

Example:
http://[victim]////../../data/config/microsrv.cfg

Successful exploitation may disclose directory listings and the content of arbitrary files.

The vulnerability has been reported in versions 440, 470, 480, 255ST, and 425ST. Others may also be affected.

Reportedly, anyone can also access the following management page, which discloses user passwords and allows adding of new users:

http://[victim]/srvadmin/usersecure.dhtml

Solution
Allow only trusted IP addresses to connect to the HTTP interface.

Provided and/or discovered by
J. A. Gutierrez

Changelog
Further details available in Customer Area

Deep Links
Links available in Customer Area