PT-2006-2164 · Xerox · Xerox Copycentre+1

Publicado 2006-03-10 · Atualizado 2018-10-04 · CVE-2006-1137

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Xerox CopyCentre and Xerox WorkCentre Pro versions 1.001.02.073 or earlier Xerox CopyCentre and Xerox WorkCentre Pro version 1.001.02.074 before 1.001.02.715

Description The issue allows remote attackers to cause a denial of service via a crafted PostScript file. This can be achieved by either navigating through the directory or sending a file to expose TCP/IP ports.

Recommendations For Xerox CopyCentre and Xerox WorkCentre Pro versions 1.001.02.073 or earlier, update to a version later than 1.001.02.073. For Xerox CopyCentre and Xerox WorkCentre Pro version 1.001.02.074, update to version 1.001.02.715 or later.

Correção

Identificadores relacionados

CVE-2006-1137

Produtos afetados

Xerox Copycentre

Xerox Workcentre Pro

Referências · 10

• https://exchange.xforce.ibmcloud.com/vulnerabilities/25174 · Nota
• http://osvdb.org/23726 · Nota
• http://securitytracker.com/id?1015738 · Nota
• http://secunia.com/advisories/19146 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/25173 · Nota
• http://vupen.com/english/advisories/2006/0857 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2006-1137 · Nota de Segurança
• http://securityfocus.com/bid/17014 · Nota
• http://xerox.com/downloads/usa/en/c/cert_XRX06_002.pdf · Aviso do Fabricante
• http://osvdb.org/23725 · Nota