NVD

Id
63893  
Name
CVE-2006-5290  
Description
The ESS/ Network Controller and MicroServer Web Server components of Xerox WorkCentre and WorkCentre Pro 232, 238, 245, 255, 265 and 275 allow remote attackers to bypass authentication and execute arbitrary code via "WebUI command injection on TCP/IP hostname."  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2016-12-20  
Published
2006-10-13  
Modified Date
2011-03-07  
Seq
2006-5290  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
333025 63893 CVE-2006-5290 1016981  View
333026 63893 CVE-2006-5290 20334  View
333027 63893 CVE-2006-5290 ADV-2006-3921  View
333028 63893 CVE-2006-5290 http://www.xerox.com/downloads/usa/en/c/cert_XRX06_005.pdf  View
333029 63893 CVE-2006-5290 xerox-hostname-command-execution(29357)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
61025 JVNDB-2006-003291 Xerox WorkCentre における認証を回避される脆弱性 Xerox WorkCentre の MicroServer Web Server コンポーネントの ESS/ Network Controller には、認証を回避される、および任意のコードを実行される脆弱性が存在します。 CVE-2006-5290 21392 CVE-2006-5290 63893 7.5 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-003291.html 2006-10-03 2012-12-20 View