Lexmark International X1185 Improper Privilege Management (CVE-2006-0577)

#%NASL_MIN_LEVEL 80900
##
# (C) Tenable, Inc.
##

include('compat.inc');

if (description)
{
  script_id(505325);
  script_version("1.2");
  script_set_attribute(attribute:"plugin_modification_date", value:"2026/04/21");

  script_cve_id("CVE-2006-0577");

  script_name(english:"Lexmark International X1185 Improper Privilege Management (CVE-2006-0577)");

  script_set_attribute(attribute:"synopsis", value:
"The remote OT asset is affected by a vulnerability.");
  script_set_attribute(attribute:"description", value:
"Lexmark X1185 printer allows local users to gain SYSTEM privileges by
navigating to the Appearance dialog and selecting the Additional
styles (skins) are available on the Lexmark web site option, which
launches a web browser that is running with SYSTEM privileges.

This plugin only works with Tenable.ot.
Please visit https://www.tenable.com/products/tenable-ot for more information.");
  script_set_attribute(attribute:"see_also", value:"http://secunia.com/advisories/18728");
  script_set_attribute(attribute:"see_also", value:"http://www.securityfocus.com/archive/1/424322/100/0/threaded");
  script_set_attribute(attribute:"see_also", value:"http://www.securityfocus.com/bid/16534");
  script_set_attribute(attribute:"see_also", value:"http://www.vupen.com/english/advisories/2006/0482");
  script_set_attribute(attribute:"see_also", value:"https://exchange.xforce.ibmcloud.com/vulnerabilities/24596");
  script_set_attribute(attribute:"solution", value:
"Refer to the vendor advisory.");
  script_set_cvss_base_vector("CVSS2#AV:L/AC:L/Au:N/C:C/I:C/A:C");
  script_set_cvss_temporal_vector("CVSS2#E:U/RL:OF/RC:C");
  script_set_cvss3_base_vector("CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H");
  script_set_cvss3_temporal_vector("CVSS:3.0/E:U/RL:O/RC:C");
  script_set_attribute(attribute:"cvss_score_source", value:"CVE-2006-0577");

  script_set_attribute(attribute:"exploitability_ease", value:"No known exploits are available");
  script_set_attribute(attribute:"exploit_available", value:"false");
  script_cwe_id(269);

  script_set_attribute(attribute:"vuln_publication_date", value:"2006/02/08");
  script_set_attribute(attribute:"patch_publication_date", value:"2006/02/08");
  script_set_attribute(attribute:"plugin_publication_date", value:"2026/04/20");

  script_set_attribute(attribute:"plugin_type", value:"remote");
  script_set_attribute(attribute:"cpe", value:"cpe:/h:lexmark:x1185");
  script_set_attribute(attribute:"generated_plugin", value:"former");
  script_end_attributes();

  script_category(ACT_GATHER_INFO);
  script_family(english:"Tenable.ot");

  script_copyright(english:"This script is Copyright (C) 2026 and is owned by Tenable, Inc. or an Affiliate thereof.");

  script_dependencies("tenable_ot_api_integration.nasl");
  script_require_keys("Tenable.ot/LexmarkInternational");

  exit(0);
}


include('tenable_ot_cve_funcs.inc');

get_kb_item_or_exit('Tenable.ot/LexmarkInternational');

var asset = tenable_ot::assets::get(vendor:'LexmarkInternational');

var vuln_cpes = {
    "cpe:/h:lexmark:x1185" :
        {"family" : "LexmarkInternational"}
};

tenable_ot::cve::compare_and_report(asset:asset, cpes:vuln_cpes, severity:SECURITY_HOLE);