PT-2006-7078 · Xerox+1 · Workcentre Pro+2

Publicado 2006-12-11 · Atualizado 2008-09-05 · CVE-2006-6469

Positive Technologies (AI Summary)

CVSS v2.0

5.8

Média

Vetor base

AV:A/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Xerox WorkCentre and WorkCentre Pro versions prior to 12.050.03.000 Xerox WorkCentre and WorkCentre Pro versions 13.x prior to 13.050.03.000 Xerox WorkCentre and WorkCentre Pro versions 14.x prior to 14.050.03.000

Description The issue is related to the postgres port (5432/tcp) not being blocked, which may allow unauthorized connections to a PostgreSQL daemon. This could potentially lead to remote attacks.

Recommendations For versions prior to 12.050.03.000, update to version 12.050.03.000 or later. For versions 13.x prior to 13.050.03.000, update to version 13.050.03.000 or later. For versions 14.x prior to 14.050.03.000, update to version 14.050.03.000 or later.

Correção

Identificadores relacionados

CVE-2006-6469

Produtos afetados

Postgresql

Workcentre

Workcentre Pro

Referências · 3

• http://secunia.com/advisories/23265 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2006-6469 · Nota de Segurança
• http://xerox.com/downloads/usa/en/c/cert_XRX06_004_v11.pdf · Aviso do Fabricante