PT-2006-2164 · Xerox · Xerox Copycentre+1

Published 2006-03-10 · Updated 2018-10-04 · CVE-2006-1137

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Xerox CopyCentre and Xerox WorkCentre Pro versions 1.001.02.073 or earlier Xerox CopyCentre and Xerox WorkCentre Pro version 1.001.02.074 before 1.001.02.715

Description The issue allows remote attackers to cause a denial of service via a crafted PostScript file. This can be achieved by either navigating through the directory or sending a file to expose TCP/IP ports.

Recommendations For Xerox CopyCentre and Xerox WorkCentre Pro versions 1.001.02.073 or earlier, update to a version later than 1.001.02.073. For Xerox CopyCentre and Xerox WorkCentre Pro version 1.001.02.074, update to version 1.001.02.715 or later.

Fix

Related Identifiers

CVE-2006-1137

Affected Products

Xerox Copycentre

Xerox Workcentre Pro

References · 10

• https://nvd.nist.gov/vuln/detail/CVE-2006-1137 · Security Note
• http://xerox.com/downloads/usa/en/c/cert_XRX06_002.pdf · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/25174 · Note
• http://osvdb.org/23726 · Note
• http://securitytracker.com/id?1015738 · Note
• http://secunia.com/advisories/19146 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/25173 · Note
• http://vupen.com/english/advisories/2006/0857 · Note
• http://securityfocus.com/bid/17014 · Note
• http://osvdb.org/23725 · Note