PT-2006-7081 · Xerox+1 · Xerox Workcentre+2

Publicado 2006-12-11 · Atualizado 2008-09-05 · CVE-2006-6472

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Xerox WorkCentre versions prior to 12.050.03.000 Xerox WorkCentre Pro versions 13.x prior to 13.050.03.000 Xerox WorkCentre Pro versions 14.x prior to 14.050.03.000

Description The issue concerns the configuration of the httpd.conf file, which sets port 443 to always be active. This configuration has an unknown impact and may allow for remote attack vectors.

Recommendations For Xerox WorkCentre versions prior to 12.050.03.000, update to version 12.050.03.000 or later. For Xerox WorkCentre Pro versions 13.x prior to 13.050.03.000, update to version 13.050.03.000 or later. For Xerox WorkCentre Pro versions 14.x prior to 14.050.03.000, update to version 14.050.03.000 or later.

Correção

Identificadores relacionados

CVE-2006-6472

Produtos afetados

Xerox Workcentre

Xerox Workcentre Pro

Httpd.Conf

Referências · 3

• http://secunia.com/advisories/23265 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2006-6472 · Nota de Segurança
• http://xerox.com/downloads/usa/en/c/cert_XRX06_004_v11.pdf · Aviso do Fabricante