CVE-2006-6438

Xerox WorkCentre and WorkCentre Pro before 12.050.03.000, 13.x before 13.050.03.000, and 14.x before 14.050.03.000 leaves sensitive user data in http.log after an Immediate Image Overwrite IIO, which allows local users to obtain the data by reading the http.log file...

CVE-2006-6436

Cross-site scripting XSS vulnerability in the Network controller in Xerox WorkCentre and WorkCentre Pro before 12.050.03.000, 13.x before 13.050.03.000, and 14.x before 14.050.03.000 allows remote attackers to inject arbitrary web script or HTML via HTTP TRACE messages...

CVE-2006-6432

Unspecified vulnerability in the Scan-to-mailbox feature in Xerox WorkCentre and WorkCentre Pro before 12.060.17.000, 13.x before 13.060.17.000, and 14.x before 14.060.17.000 allows remote attackers to download certain files via unspecified vectors...

CVE-2006-6427

The Web User Interface in Xerox WorkCentre and WorkCentre Pro before 12.060.17.000, 13.x before 13.060.17.000, and 14.x before 14.060.17.000 allows remote attackers to execute arbitrary commands via unspecified vectors involving "command injection" in 1 the TCP/IP hostname, 2 Scan-to-mailbox fold...

CVE-2006-6430

Web services in Xerox WorkCentre and WorkCentre Pro before 12.060.17.000, 13.x before 13.060.17.000, and 14.x before 14.060.17.000 do not require HTTPS, which allows remote attackers to obtain sensitive information by sniffing the unencrypted HTTP traffic...

CVE-2006-6440

Multiple unspecified vulnerabilities in Xerox WorkCentre and WorkCentre Pro before 12.050.03.000, 13.x before 13.050.03.000, and 14.x before 14.050.03.000 allow remote attackers to have an unspecified impact via unspecified vectors relating to "HTTP Security issues."...

CVE-2006-6440

Multiple unspecified vulnerabilities in Xerox WorkCentre and WorkCentre Pro before 12.050.03.000, 13.x before 13.050.03.000, and 14.x before 14.050.03.000 allow remote attackers to have an unspecified impact via unspecified vectors relating to "HTTP Security issues."...

CVE-2006-6428

CVE-2006-6428 affects Xerox WorkCentre/WorkCentre Pro (pre-12.060.17.000, 13.x before 13.060.17.000, 14.x before 14.060.17.000). The issue allows remote attackers to gain access via unspecified vectors related to browser permissions. Exploitation details are not provided in the connected document...

CVE-2006-6440

The CVE-2006-6440 entry concerns Xerox WorkCentre / WorkCentre Pro devices. Affected products include Xerox WorkCentre models with versions before 12.050.03.000, 13.x before 13.050.03.000, and 14.x before 14.050.03.000. The vulnerabilities are described as multiple unspecified issues that permit ...

CVE-2006-6438

Xerox WorkCentre and WorkCentre Pro before 12.050.03.000, 13.x before 13.050.03.000, and 14.x before 14.050.03.000 leaves sensitive user data in http.log after an Immediate Image Overwrite IIO, which allows local users to obtain the data by reading the http.log file...

CVE-2006-6431

CVE-2006-6431 affects Xerox WorkCentre and WorkCentre Pro before 12.060.17.000, 13.x before 13.060.17.000, and 14.x before 14.060.17.000. The vulnerability allows attackers to modify email message signatures via unspecified vectors. The available sources do not specify the root cause, exploit vec...

CVE-2006-6429

CVE-2006-6429 affects Xerox WorkCentre and WorkCentre Pro before 12.060.17.000, 13.x before 13.060.17.000, and 14.x before 14.060.17.000. The vulnerability allows attackers to modify certain configuration settings via unspecified vectors related to the TFTP/BOOTP auto configuration option . The i...

CVE-2006-6430

Web services in Xerox WorkCentre and WorkCentre Pro before 12.060.17.000, 13.x before 13.060.17.000, and 14.x before 14.060.17.000 do not require HTTPS, which allows remote attackers to obtain sensitive information by sniffing the unencrypted HTTP traffic...

CVE-2006-6436

CVE-2006-6436 affects Xerox WorkCentre and WorkCentre Pro network controllers. The vulnerability enables cross-site scripting via HTTP TRACE messages in affected firmware: 12.050.03.000 and earlier, 13.x before 13.050.03.000, and 14.x before 14.050.03.000. Impact is remote injection of arbitrary ...

CVE-2006-6432

Unspecified vulnerability in the Scan-to-mailbox feature in Xerox WorkCentre and WorkCentre Pro before 12.060.17.000, 13.x before 13.060.17.000, and 14.x before 14.060.17.000 allows remote attackers to download certain files via unspecified vectors...

CVE-2006-6433

Xerox WorkCentre and WorkCentre Pro before 12.060.17.000, 13.x before 13.060.17.000, and 14.x before 14.060.17.000 does not record accurate timestamps, which makes it easier for remote attackers to avoid detection when an audit tries to rely on these timestamps...

CVE-2006-6428

Xerox WorkCentre and WorkCentre Pro before 12.060.17.000, 13.x before 13.060.17.000, and 14.x before 14.060.17.000 allow remote attackers to gain access via unspecified vectors related to "browser permissions."...

CVE-2006-6441

Xerox WorkCentre and WorkCentre Pro before 12.050.03.000, 13.x before 13.050.03.000, and 14.x before 14.050.03.000 allows local users to bypass security controls and boot Alchemy via certain alternate boot media, as demonstrated by a USB thumb drive...

CVE-2006-6431

Unspecified vulnerability in Xerox WorkCentre and WorkCentre Pro before 12.060.17.000, 13.x before 13.060.17.000, and 14.x before 14.060.17.000 allows attackers to modify signatures of e-mail messages via unspecified vectors...

CVE-2006-6429

Xerox WorkCentre and WorkCentre Pro before 12.060.17.000, 13.x before 13.060.17.000, and 14.x before 14.060.17.000 allows attackers to modify certain configuration settings via unspecified vectors involving the "TFTP/BOOTP auto configuration option."...