Dell 3000cn Permissions, Privileges, and Access Controls (CVE-2006-2112)

#%NASL_MIN_LEVEL 80900
##
# (C) Tenable, Inc.
##

include('compat.inc');

if (description)
{
  script_id(502781);
  script_version("1.3");
  script_set_attribute(attribute:"plugin_modification_date", value:"2026/04/21");

  script_cve_id("CVE-2006-2112");

  script_name(english:"Dell 3000cn Permissions, Privileges, and Access Controls (CVE-2006-2112)");

  script_set_attribute(attribute:"synopsis", value:
"The remote OT asset is affected by a vulnerability.");
  script_set_attribute(attribute:"description", value:
"Fuji Xerox Printing Systems (FXPS) print engine, as used in products
including (1) Dell 3000cn through 5110cn and (2) Fuji Xerox DocuPrint
firmware before 20060628 and Network Option Card firmware before 5.13,
allows remote attackers to use the FTP printing interface as a proxy
(FTP bounce) by using arbitrary PORT arguments to connect to systems
for which access would be otherwise restricted.

This plugin only works with Tenable.ot.
Please visit https://www.tenable.com/products/tenable-ot for more information.");
# script_set_attribute(attribute:"see_also", value:"http://itso.iu.edu/20060824_FXPS_Print_Engine_Vulnerabilities");
  script_set_attribute(attribute:"see_also", value:"http://marc.info/?l=bugtraq&m=115652437223454&w=2");
  script_set_attribute(attribute:"see_also", value:"http://secunia.com/advisories/21630");
  script_set_attribute(attribute:"see_also", value:"http://secunia.com/advisories/22463");
# script_set_attribute(attribute:"see_also", value:"http://www.osvdb.org/28249");
  script_set_attribute(attribute:"see_also", value:"http://www.securityfocus.com/archive/1/444321/100/0/threaded");
  script_set_attribute(attribute:"see_also", value:"http://www.securityfocus.com/bid/19711");
  script_set_attribute(attribute:"see_also", value:"http://www.vupen.com/english/advisories/2006/3401");
  script_set_attribute(attribute:"see_also", value:"https://exchange.xforce.ibmcloud.com/vulnerabilities/28637");
# script_set_attribute(attribute:"see_also", value:"http://itso.iu.edu/20060824_FXPS_Print_Engine_Vulnerabilities");
  script_set_attribute(attribute:"see_also", value:"http://marc.info/?l=bugtraq&m=115652437223454&w=2");
  script_set_attribute(attribute:"see_also", value:"http://secunia.com/advisories/21630");
  script_set_attribute(attribute:"see_also", value:"http://secunia.com/advisories/22463");
# script_set_attribute(attribute:"see_also", value:"http://www.osvdb.org/28249");
  script_set_attribute(attribute:"see_also", value:"http://www.securityfocus.com/archive/1/444321/100/0/threaded");
  script_set_attribute(attribute:"see_also", value:"http://www.securityfocus.com/bid/19711");
  script_set_attribute(attribute:"see_also", value:"http://www.vupen.com/english/advisories/2006/3401");
  script_set_attribute(attribute:"see_also", value:"https://exchange.xforce.ibmcloud.com/vulnerabilities/28637");
  script_set_attribute(attribute:"solution", value:
"Refer to the vendor advisory.");
  script_set_cvss_base_vector("CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P");
  script_set_cvss_temporal_vector("CVSS2#E:U/RL:OF/RC:C");
  script_set_attribute(attribute:"cvss_score_source", value:"CVE-2006-2112");

  script_set_attribute(attribute:"exploitability_ease", value:"No known exploits are available");
  script_set_attribute(attribute:"exploit_available", value:"false");
  script_cwe_id(264);

  script_set_attribute(attribute:"vuln_publication_date", value:"2006/08/25");
  script_set_attribute(attribute:"patch_publication_date", value:"2006/08/25");
  script_set_attribute(attribute:"plugin_publication_date", value:"2024/12/04");

  script_set_attribute(attribute:"plugin_type", value:"remote");
  script_set_attribute(attribute:"cpe", value:"cpe:/h:dell:3000cn");
  script_set_attribute(attribute:"cpe", value:"cpe:/h:dell:3010cn");
  script_set_attribute(attribute:"cpe", value:"cpe:/h:dell:3100cn");
  script_set_attribute(attribute:"cpe", value:"cpe:/h:dell:3110cn");
  script_set_attribute(attribute:"cpe", value:"cpe:/h:dell:5100cn");
  script_set_attribute(attribute:"cpe", value:"cpe:/h:dell:5110cn");
  script_set_attribute(attribute:"generated_plugin", value:"former");
  script_end_attributes();

  script_category(ACT_GATHER_INFO);
  script_family(english:"Tenable.ot");

  script_copyright(english:"This script is Copyright (C) 2024-2026 and is owned by Tenable, Inc. or an Affiliate thereof.");

  script_dependencies("tenable_ot_api_integration.nasl");
  script_require_keys("Tenable.ot/Dell");

  exit(0);
}


include('tenable_ot_cve_funcs.inc');

get_kb_item_or_exit('Tenable.ot/Dell');

var asset = tenable_ot::assets::get(vendor:'Dell');

var vuln_cpes = {
    "cpe:/h:dell:3000cn" :
        {"family" : "DellLaserPrinter"},
    "cpe:/h:dell:3010cn" :
        {"family" : "DellLaserPrinter"},
    "cpe:/h:dell:3100cn" :
        {"family" : "DellLaserPrinter"},
    "cpe:/h:dell:3110cn" :
        {"family" : "DellLaserPrinter"},
    "cpe:/h:dell:5100cn" :
        {"family" : "DellLaserPrinter"},
    "cpe:/h:dell:5110cn" :
        {"family" : "DellLaserPrinter"}
};

tenable_ot::cve::compare_and_report(asset:asset, cpes:vuln_cpes, severity:SECURITY_HOLE);