Fuji Xerox Printing Systems (FXPS) Print Engine contains a flaw that may lead to an unauthorized information disclosure. The problem is that the FTP server does not validate IP addresses supplied via the PORT command. It is possible for a remote attacker to establish a connection between the server and an arbitrary port on another system to perform a portscan, which will disclose sensitiv system information resulting in a loss of confidentiality.

Upgrade the firmware to the latest version available from the vendor, as it has been reported to fix this vulnerability. It is also possible to correct the flaw by implementing the following workaround: disable FTP printing.

• Bugtraq ID: 19711
• CVE ID: 2006-2112 (see also: NVD)
• VUPEN Advisory: 2006
• Secunia Advisory ID: 21630 22463
• Related OSVDB ID: 28250
• ISS X-Force ID: 28637
• Mail List Post: http://archives.neohapsis.com/archives/vulnwatch/2006-q3/0030.html
• Vendor Specific Advisory URL: http://itso.iu.edu/20060824_FXPS_Print_Engine_Vulnerabilities
• Other Advisory URL: http://itso.iu.edu/20060824_FXPS_Print_Engine_Vulnerabilities
  https://itso.iu.edu/20060824_FXPS_Print_Engine_Vulnerabilities
• Packet Storm: http://packetstormsecurity.org/0608-advisories/fuji-xerox.txt
• Vendor Specific Solution URL: http://support.dell.com/support/topics/global.aspx/support/dsn/en/document?docid=1C28DAC7B37DFEF0E0401E0A55171735&c=us&l=en&s=gen
• Vendor URL: http://www.fxpsc.co.jp/en/

• Sean Krulewitch - Indiana University
• Nate Johnson - Indiana University