PT-2006-7036 · Microsoft+1 · Networking+2

Publicado

2006-12-10

·

Atualizado

2017-07-29

·

CVE-2006-6427

CVSS v2.0

7.5

Alta

VetorAV:N/AC:L/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions Xerox WorkCentre and WorkCentre Pro versions prior to 12.060.17.000 Xerox WorkCentre and WorkCentre Pro versions 13.x prior to 13.060.17.000 Xerox WorkCentre and WorkCentre Pro versions 14.x prior to 14.060.17.000
Description The issue allows remote attackers to execute arbitrary commands via unspecified vectors involving command injection in the TCP/IP hostname, Scan-to-mailbox folder names, and certain parameters in the Microsoft Networking configuration.
Recommendations For versions prior to 12.060.17.000, update to version 12.060.17.000 or later. For versions 13.x prior to 13.060.17.000, update to version 13.060.17.000 or later. For versions 14.x prior to 14.060.17.000, update to version 14.060.17.000 or later.

Correção

OS Command Injection

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-78

Identificadores relacionados

CVE-2006-6427

Produtos afetados

Networking
Xerox Workcentre
Xerox Workcentre Pro