CVE-2006-0827

The CVE-2006-0827 entry relates to a cross-site scripting vulnerability in the ESS/Network Controller and MicroServer Web Server of Xerox WorkCentre Pro and Xerox WorkCentre devices running software 13.027.24.015 and 14.027.24.015. The vulnerability is exploitable remotely over the network due to...

[SA18952] Xerox ESS/ Network Controller and MicroServer Vulnerabilities

TITLE: Xerox ESS/ Network Controller and MicroServer Vulnerabilities SECUNIA ADVISORY ID: SA18952 VERIFY ADVISORY: http://secunia.com/advisories/18952/ CRITICAL: Moderately critical IMPACT: Security Bypass, Cross Site Scripting, DoS WHERE: From remote OPERATING SYSTEM: Xerox WorkCentre Pro...

CVE-2005-2646

Unknown vulnerability in Xerox MicroServer Web Server in Document Centre 220 through 265, 332 and 340, 420 through 490, and 535 through 555 allows remote attackers to cause a denial of service or read files via unknown vectors involving crafted HTTP requests...

CVE-2005-2647

Cross-site scripting XSS vulnerability in Xerox MicroServer Web Server in Document Centre 220 through 265, 332 and 340, 420 through 490, and 535 through 555 allows remote attackers to inject arbitrary web script or HTML and modify web pages via unknown vectors...

CVE-2005-2645

Unknown vulnerability in Xerox MicroServer Web Server in Document Centre 220 through 265, 332 and 340, 420 through 490, and 535 through 555 allows remote attackers to bypass authentication...

CVE-2005-2646

Unknown vulnerability in Xerox MicroServer Web Server in Document Centre 220 through 265, 332 and 340, 420 through 490, and 535 through 555 allows remote attackers to cause a denial of service or read files via unknown vectors involving crafted HTTP requests...

CVE-2005-2647

CVE-2005-2647 describes a cross-site scripting (XSS) flaw in the Xerox MicroServer Web Server used by Document Centre devices. The vulnerability affects Document Centre 220–265, 332, 340, 420–490, and 535–555, allowing remote attackers to inject arbitrary web script or HTML and modify web pages v...

CVE-2005-2645

Unknown vulnerability in Xerox MicroServer Web Server in Document Centre 220 through 265, 332 and 340, 420 through 490, and 535 through 555 allows remote attackers to bypass authentication...

CVE-2005-2645

The CVE-2005-2645 entry concerns Xerox Document Centre MicroServer Web Server in specific Document Centre models (220–265, 332/340, 420–490, 535–555). The connected sources specify an authentication bypass vulnerability affecting the embedded web server, enabling remote attackers to bypass authen...

CVE-2005-2646

CVE-2005-2646 refers to an unknown vulnerability in Xerox MicroServer Web Server within Xerox Document Centre models 220–265, 332, 340, 420–490, and 535–555. The issue reportedly allows remote attackers to cause a denial of service or to read files via crafted HTTP requests; the exact vectors, af...

CVE-2005-2647

Cross-site scripting XSS vulnerability in Xerox MicroServer Web Server in Document Centre 220 through 265, 332 and 340, 420 through 490, and 535 through 555 allows remote attackers to inject arbitrary web script or HTML and modify web pages via unknown vectors...

[SA16467] Xerox Document Centre MicroServer Web Server Vulnerabilities

---------------------------------------------------------------------- Bist Du interessiert an einem neuen Job in IT-Sicherheit? Secunia hat zwei freie Stellen als Junior und Senior Spezialist in IT- Sicherheit: http://secunia.com/secuniavacancies/...

[SA16167] Xerox MicroServer Web Server Multiple Vulnerabilities

---------------------------------------------------------------------- Bist Du interessiert an einem neuen Job in IT-Sicherheit? Secunia hat zwei freie Stellen als Junior und Senior Spezialist in IT- Sicherheit: http://secunia.com/secuniavacancies/...

CVE-2005-2201

Unknown vulnerability in the MicroServer Web Server for Xerox WorkCentre Pro Color 2128, 2636, and 3545, version 0.001.04.044 through 0.001.04.504, allow attackers to cause a denial of service or access files via crafted HTTP requests...

CVE-2005-2202

Cross-site scripting XSS vulnerability in the MicroServer Web Server for Xerox WorkCentre Pro Color 2128, 2636, and 3545, version 0.001.04.044 through 0.001.04.504, allows remote attackers to inject arbitrary web script or HTML via unknown vectors...

CVE-2005-1179

Unknown vulnerability in Xerox MicroServer Web Server for various WorkCentre products including M35/M45/M55 2.028.11.000 through 2.97.20.032 and 4.84.16.000 through 4.97.20.032, Pro 35/45/55 3.028.11.000 through 3.97.20.032, Pro 65/75/90 1.001.00.060 through 1.001.02.084, and others, related to...

CVE-2005-1179

CVE-2005-1179 concerns Xerox MicroServer Web Server in various WorkCentre models (e.g., M35/M45/M55 with 2.028.11.000–2.97.20.032 and 4.84.16.000–4.97.20.032; Pro 35/45/55 and Pro 65/75/90 ranges listed in the description) where an SNMP authentication issue could allow remote modification of syst...

CVE-2005-1179

Unknown vulnerability in Xerox MicroServer Web Server for various WorkCentre products including M35/M45/M55 2.028.11.000 through 2.97.20.032 and 4.84.16.000 through 4.97.20.032, Pro 35/45/55 3.028.11.000 through 3.97.20.032, Pro 65/75/90 1.001.00.060 through 1.001.02.084, and others, related to...

CVE-2005-0703

The CVE-2005-0703 entry concerns Xerox MicroServer Web Server used by WorkCentre models (e.g., M35/M45/M55, Pro series, and others). The vulnerability arises from an unauthenticated account on the embedded web server that allows a remote attacker to modify device configuration, effectively bypass...

CVE-2005-0703

Xerox MicroServer Web Server for various WorkCentre products including M35/M45/M55 2.028.11.000 through 2.97.20.032 and 4.84.16.000 through 4.97.20.032, Pro 35/45/55 3.028.11.000 through 3.97.20.032, Pro 65/75/90 1.001.00.060 through 1.001.02.084, and others, has an "unauthenticated account," whi...