336 matches found
CVE-2006-6434
The vulnerability CVE-2006-6434 affects Xerox WorkCentre and WorkCentre Pro knockoffs prior to specific version thresholds (12.050.03.000, 13.x before 13.050.03.000, and 14.x before 14.050.03.000). It allows remote attackers to bypass authentication controls via unknown vectors. The underlying ro...
CVE-2006-6428
CVE-2006-6428 affects Xerox WorkCentre/WorkCentre Pro (pre-12.060.17.000, 13.x before 13.060.17.000, 14.x before 14.060.17.000). The issue allows remote attackers to gain access via unspecified vectors related to browser permissions. Exploitation details are not provided in the connected document...
CVE-2006-6431
CVE-2006-6431 affects Xerox WorkCentre and WorkCentre Pro before 12.060.17.000, 13.x before 13.060.17.000, and 14.x before 14.060.17.000. The vulnerability allows attackers to modify email message signatures via unspecified vectors. The available sources do not specify the root cause, exploit vec...
CVE-2006-6427
The CVE-2006-6427 entry concerns Xerox WorkCentre and WorkCentre Pro web UIs affected by command-injection in the WebUI. Affected versions are before 12.060.17.000, 13.x before 13.060.17.000, and 14.x before 14.060.17.000. The vulnerability allows remote attackers to execute arbitrary commands vi...
CVE-2006-6427
The Web User Interface in Xerox WorkCentre and WorkCentre Pro before 12.060.17.000, 13.x before 13.060.17.000, and 14.x before 14.060.17.000 allows remote attackers to execute arbitrary commands via unspecified vectors involving "command injection" in 1 the TCP/IP hostname, 2 Scan-to-mailbox fold...
CVE-2006-6437
CVE-2006-6437 affects Xerox WorkCentre and WorkCentre Pro before versions 12.050.03.000, 13.x before 13.050.03.000, and 14.x before 14.050.03.000. The issue is a denial of service caused by processing a crafted PS file via ops3-dmn, leading to application crash and core dump. The provided documen...
CVE-2006-6436
CVE-2006-6436 affects Xerox WorkCentre and WorkCentre Pro network controllers. The vulnerability enables cross-site scripting via HTTP TRACE messages in affected firmware: 12.050.03.000 and earlier, 13.x before 13.050.03.000, and 14.x before 14.050.03.000. Impact is remote injection of arbitrary ...
CVE-2006-6436
Cross-site scripting XSS vulnerability in the Network controller in Xerox WorkCentre and WorkCentre Pro before 12.050.03.000, 13.x before 13.050.03.000, and 14.x before 14.050.03.000 allows remote attackers to inject arbitrary web script or HTML via HTTP TRACE messages...
CVE-2006-6440
Multiple unspecified vulnerabilities in Xerox WorkCentre and WorkCentre Pro before 12.050.03.000, 13.x before 13.050.03.000, and 14.x before 14.050.03.000 allow remote attackers to have an unspecified impact via unspecified vectors relating to "HTTP Security issues."...
CVE-2006-6441
Xerox WorkCentre and WorkCentre Pro before 12.050.03.000, 13.x before 13.050.03.000, and 14.x before 14.050.03.000 allows local users to bypass security controls and boot Alchemy via certain alternate boot media, as demonstrated by a USB thumb drive...
CVE-2006-6438
Xerox WorkCentre and WorkCentre Pro before 12.050.03.000, 13.x before 13.050.03.000, and 14.x before 14.050.03.000 leaves sensitive user data in http.log after an Immediate Image Overwrite IIO, which allows local users to obtain the data by reading the http.log file...
CVE-2006-6434
Unspecified vulnerability in the Web User Interface in Xerox WorkCentre and WorkCentre Pro before 12.050.03.000, 13.x before 13.050.03.000, and 14.x before 14.050.03.000 allows remote attackers to bypass authentication controls via unknown vectors...
CVE-2006-6432
CVE-2006-6432 concerns Xerox WorkCentre and WorkCentre Pro devices. The scan-to-mailbox feature on affected versions—12.060.17.000 or earlier, 13.x up to 13.060.17.000, and 14.x up to 14.060.17.000—allows remote attackers to download certain files via unspecified vectors. The provided sources do ...
CVE-2006-6433
Xerox WorkCentre and WorkCentre Pro before 12.060.17.000, 13.x before 13.060.17.000, and 14.x before 14.060.17.000 does not record accurate timestamps, which makes it easier for remote attackers to avoid detection when an audit tries to rely on these timestamps...
CVE-2006-6440
The CVE-2006-6440 entry concerns Xerox WorkCentre / WorkCentre Pro devices. Affected products include Xerox WorkCentre models with versions before 12.050.03.000, 13.x before 13.050.03.000, and 14.x before 14.050.03.000. The vulnerabilities are described as multiple unspecified issues that permit ...
CVE-2006-6430
CVE-2006-6430 affects Xerox WorkCentre/WorkCentre Pro before versions 12.060.17.000, 13.x before 13.060.17.000, and 14.x before 14.060.17.000; these web services do not require HTTPS, allowing remote attackers to sniff unencrypted HTTP traffic and obtain sensitive information. Remediation is to u...
CVE-2006-6438
CVE-2006-6438 affects Xerox WorkCentre and WorkCentre Pro before 12.050.03.000, 13.x before 13.050.03.000, and 14.x before 14.050.03.000. After an Immediate Image Overwrite (IIO), the system leaves sensitive user data in http.log, which local users can read to obtain the data. Public sources in t...
Xerox WorkCentre及WorkCentre Pro多个安全漏洞
Xerox WorkCentre是一款数码打印复印一体机。 Xerox WorkCentre的ESS/Network Controller和MicroServer Web Server代码中存在多个安全漏洞，具体如下： Web用户接口上的TCP/IP用户名存在命令注入漏洞； Web用户接口上的Scan-to-mailbox文件夹名称字段存在命令注入漏洞； Web用户接口上的Microsoft Networking配置参数存在命令注入漏洞； 浏览器权限可能允许非授权访问； TFTP/BOOTP自动配置选项可能允许非授权的配置设置； 可使用HTTP而不是HTTPS发布Web服务请求；...
