CVE-2006-6429

CVE-2006-6429 affects Xerox WorkCentre and WorkCentre Pro before 12.060.17.000, 13.x before 13.060.17.000, and 14.x before 14.060.17.000. The vulnerability allows attackers to modify certain configuration settings via unspecified vectors related to the TFTP/BOOTP auto configuration option . The i...

CVE-2006-6434

The vulnerability CVE-2006-6434 affects Xerox WorkCentre and WorkCentre Pro knockoffs prior to specific version thresholds (12.050.03.000, 13.x before 13.050.03.000, and 14.x before 14.050.03.000). It allows remote attackers to bypass authentication controls via unknown vectors. The underlying ro...

CVE-2006-6431

CVE-2006-6431 affects Xerox WorkCentre and WorkCentre Pro before 12.060.17.000, 13.x before 13.060.17.000, and 14.x before 14.060.17.000. The vulnerability allows attackers to modify email message signatures via unspecified vectors. The available sources do not specify the root cause, exploit vec...

CVE-2006-6441

Xerox WorkCentre and WorkCentre Pro before 12.050.03.000, 13.x before 13.050.03.000, and 14.x before 14.050.03.000 allows local users to bypass security controls and boot Alchemy via certain alternate boot media, as demonstrated by a USB thumb drive...

CVE-2006-6440

Multiple unspecified vulnerabilities in Xerox WorkCentre and WorkCentre Pro before 12.050.03.000, 13.x before 13.050.03.000, and 14.x before 14.050.03.000 allow remote attackers to have an unspecified impact via unspecified vectors relating to "HTTP Security issues."...

CVE-2006-6437

CVE-2006-6437 affects Xerox WorkCentre and WorkCentre Pro before versions 12.050.03.000, 13.x before 13.050.03.000, and 14.x before 14.050.03.000. The issue is a denial of service caused by processing a crafted PS file via ops3-dmn, leading to application crash and core dump. The provided documen...

CVE-2006-6428

CVE-2006-6428 affects Xerox WorkCentre/WorkCentre Pro (pre-12.060.17.000, 13.x before 13.060.17.000, 14.x before 14.060.17.000). The issue allows remote attackers to gain access via unspecified vectors related to browser permissions. Exploitation details are not provided in the connected document...

CVE-2006-6430

CVE-2006-6430 affects Xerox WorkCentre/WorkCentre Pro before versions 12.060.17.000, 13.x before 13.060.17.000, and 14.x before 14.060.17.000; these web services do not require HTTPS, allowing remote attackers to sniff unencrypted HTTP traffic and obtain sensitive information. Remediation is to u...

CVE-2006-6440

The CVE-2006-6440 entry concerns Xerox WorkCentre / WorkCentre Pro devices. Affected products include Xerox WorkCentre models with versions before 12.050.03.000, 13.x before 13.050.03.000, and 14.x before 14.050.03.000. The vulnerabilities are described as multiple unspecified issues that permit ...

CVE-2006-6433

Xerox WorkCentre and WorkCentre Pro before 12.060.17.000, 13.x before 13.060.17.000, and 14.x before 14.060.17.000 does not record accurate timestamps, which makes it easier for remote attackers to avoid detection when an audit tries to rely on these timestamps...

CVE-2006-6431: Undefined Security Weakness

Unspecified vulnerability in Xerox WorkCentre and WorkCentre Pro before 12.060.17.000, 13.x before 13.060.17.000, and 14.x before 14.060.17.000 allows attackers to modify signatures of e-mail messages via unspecified vectors...

CVE-2006-6430: Undefined Security Weakness

Web services in Xerox WorkCentre and WorkCentre Pro before 12.060.17.000, 13.x before 13.060.17.000, and 14.x before 14.060.17.000 do not require HTTPS, which allows remote attackers to obtain sensitive information by sniffing the unencrypted HTTP traffic...

CVE-2006-6433: Undefined Security Weakness

Xerox WorkCentre and WorkCentre Pro before 12.060.17.000, 13.x before 13.060.17.000, and 14.x before 14.060.17.000 does not record accurate timestamps, which makes it easier for remote attackers to avoid detection when an audit tries to rely on these timestamps...

CVE-2006-6440: Undefined Security Weakness

Multiple unspecified vulnerabilities in Xerox WorkCentre and WorkCentre Pro before 12.050.03.000, 13.x before 13.050.03.000, and 14.x before 14.050.03.000 allow remote attackers to have an unspecified impact via unspecified vectors relating to "HTTP Security issues."...

CVE-2006-6439: Undefined Security Weakness

Xerox WorkCentre and WorkCentre Pro before 12.050.03.000, 13.x before 13.050.03.000, and 14.x before 14.050.03.000 allows remote attackers to download the audit log and obtain potentially sensitive information via unspecified vectors...

CVE-2006-6434: Undefined Security Weakness

Unspecified vulnerability in the Web User Interface in Xerox WorkCentre and WorkCentre Pro before 12.050.03.000, 13.x before 13.050.03.000, and 14.x before 14.050.03.000 allows remote attackers to bypass authentication controls via unknown vectors...

CVE-2006-6427: Improper Neutralization of Special Elements used in an OS Command

The Web User Interface in Xerox WorkCentre and WorkCentre Pro before 12.060.17.000, 13.x before 13.060.17.000, and 14.x before 14.060.17.000 allows remote attackers to execute arbitrary commands via unspecified vectors involving "command injection" in 1 the TCP/IP hostname, 2 Scan-to-mailbox fold...

CVE-2006-6441: Undefined Security Weakness

Xerox WorkCentre and WorkCentre Pro before 12.050.03.000, 13.x before 13.050.03.000, and 14.x before 14.050.03.000 allows local users to bypass security controls and boot Alchemy via certain alternate boot media, as demonstrated by a USB thumb drive...

CVE-2006-5290

CVE-2006-5290 affects Xerox WorkCentre and WorkCentre Pro devices (232, 238, 245, 255, 265, 275) where the ESS/Network Controller and MicroServer Web Server components are vulnerable. The issue is a WebUI command injection on the TCP/IP hostname that allows remote attackers to bypass authenticati...

CVE-2006-5290: Undefined Security Weakness

The ESS/ Network Controller and MicroServer Web Server components of Xerox WorkCentre and WorkCentre Pro 232, 238, 245, 255, 265 and 275 allow remote attackers to bypass authentication and execute arbitrary code via "WebUI command injection on TCP/IP hostname."...