Advisory: Xerox Workaround & planned patch

To: bugtraq@xxxxxxxxxxxxxxxxx
Subject: Advisory: Xerox Workaround & planned patch
From: suzanne.hawley@xxxxxxxxx
Date: 3 Jun 2008 00:07:38 -0000
List-help: <mailto:bugtraq-help@securityfocus.com>
List-id: <bugtraq.list-id.securityfocus.com>
List-post: <mailto:bugtraq@securityfocus.com>
List-subscribe: <mailto:bugtraq-subscribe@securityfocus.com>
List-unsubscribe: <mailto:bugtraq-unsubscribe@securityfocus.com>
Mailing-list: contact bugtraq-help@xxxxxxxxxxxxxxxxx; run by ezmlm

Note:
Xerox has released a minimal-impact workaround for this issue for DocuShare 
4.x, 5.x, and 6.x. 

The workaround is detailed at 

https://docushare.xerox.com/doug/dsweb/View/Collection-7503 

We will also be releasing a patch to restore full functionality. Please refer 
to the above collection, or use your DocuShare support contact, for further 
information. 

Thank you to Doz and HackersCenter for finding and reporting this issue. 

Leigh L. Klotz, Jr. 
Xerox Corporation

(Submitted by S.Hawley, Xerox)

Prev by Date: DEFCON 16 Updates - Get involved!
Next by Date: [SECURITY] CVE-2008-1947: Tomcat host-manager XSS vulnerability
Previous by thread: DEFCON 16 Updates - Get involved!
Next by thread: [SECURITY] CVE-2008-1947: Tomcat host-manager XSS vulnerability
Index(es):
- Date
- Thread