Secunia

Multiple vulnerabilities have been reported in Xerox Document Centre, which can be exploited by malicious people to bypass certain security restrictions, conduct cross-site scripting attacks, or cause a DoS (Denial of Service).

1) Some unspecified errors in the Xerox MicroServer web server can be exploited to bypass the user authentication.

2) Some unspecified errors within the handling of HTTP requests in the Xerox MicroServer web server can be exploited to cause a DoS or access certain files.

3) Certain unspecified input passed to the Xerox MicroServer web server is not properly sanitised before being returned to users. This can be exploited to execute arbitrary HTML and script code in a user's browser session in context of a vulnerable site.

Solution
Apply patches.
Further details available in Customer Area

Provided and/or discovered by
Reported by vendor.

Changelog
Further details available in Customer Area

Original Advisory
Xerox:
http://www.xerox.com/downloads/usa/en/c/cert_XRX05_008.pdf
http://www.xerox.com/downloads/usa/en/c/cert_XRX05_009.pdf

Deep Links
Links available in Customer Area