PT-2006-7077 · Xerox · Workcentre Pro+1

Published 2006-12-11 · Updated 2008-09-05 · CVE-2006-6468

Positive Technologies (AI Summary)

CVSS v2.0

5.8

Medium

Base vector

AV:A/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Xerox WorkCentre and WorkCentre Pro versions prior to 12.050.03.000 Xerox WorkCentre and WorkCentre Pro versions 13.x prior to 13.050.03.000 Xerox WorkCentre and WorkCentre Pro versions 14.x prior to 14.050.03.000

Description The issue is related to the validation of the Fully Qualified Domain Name (FQDN) during a "Validate Repository SSL Certificate" scan. This might allow for spoofed certificates, potentially impacting the security of the system. The exact attack vectors and impact are not specified.

Recommendations For versions prior to 12.050.03.000, update to version 12.050.03.000 or later. For versions 13.x prior to 13.050.03.000, update to version 13.050.03.000 or later. For versions 14.x prior to 14.050.03.000, update to version 14.050.03.000 or later.

Fix

Related Identifiers

CVE-2006-6468

Affected Products

Workcentre

Workcentre Pro

References · 3

• http://secunia.com/advisories/23265 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2006-6468 · Security Note
• http://xerox.com/downloads/usa/en/c/cert_XRX06_004_v11.pdf · Vendor Advisory