CVE

Id
22531  
CVE No.
CVE-2006-6427  
Status
Candidate  
Description
The Web User Interface in Xerox WorkCentre and WorkCentre Pro before 12.060.17.000, 13.x before 13.060.17.000, and 14.x before 14.060.17.000 allows remote attackers to execute arbitrary commands via unspecified vectors involving "command injection" in (1) the TCP/IP hostname, (2) Scan-to-mailbox folder names, and (3) certain parameters in the Microsoft Networking configuration. NOTE: vector 1 might be the same as CVE-2006-5290.  
Phase
Assigned (20061209)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
217615 22531 CVE-2006-6427 CONFIRM:http://www.xerox.com/downloads/usa/en/c/cert_XRX06_006_v1b.pdf  View
217616 22531 CVE-2006-6427 CONFIRM:http://www.xerox.com/downloads/usa/en/c/cert_XRX06_007_v1.pdf  View
217617 22531 CVE-2006-6427 BID:21365  View
217618 22531 CVE-2006-6427 URL:http://www.securityfocus.com/bid/21365  View
217619 22531 CVE-2006-6427 VUPEN:ADV-2006-4791  View
217620 22531 CVE-2006-6427 URL:http://www.vupen.com/english/advisories/2006/4791  View
217621 22531 CVE-2006-6427 SECTRACK:1017337  View
217622 22531 CVE-2006-6427 URL:http://securitytracker.com/id?1017337  View
217623 22531 CVE-2006-6427 SECUNIA:23265  View
217624 22531 CVE-2006-6427 URL:http://secunia.com/advisories/23265  View
217625 22531 CVE-2006-6427 XF:xerox-webui-code-execution(30674)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
61311 JVNDB-2006-003577 Xerox WorkCentre などにおける特定の設定内容を変更される脆弱性 Xerox WorkCentre および WorkCentre Pro は、"TFTP/BOOTP 自動設定オプション" に関する処理に不備があるため、特定の設定内容を変更される脆弱性が存在します。 CVE-2006-6429 22531 5 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-003577.html  View