Incorrect Error Handling in Xerox WorkCentre SNMP Agent
CVE-2006-6470

Currently unrated

Key Information:

Vendor
Xerox
Status
Workcentre
Vendor
CVE Published:
11 December 2006

Summary

The SNMP Agent in specific models of Xerox WorkCentre and WorkCentre Pro series has a flaw that results in no error being returned for non-writable objects. This may introduce unknown impact and potential exploit avenues, raising concerns about the integrity of security features. Due to the lack of clarity in the advisory, the distinction between a vulnerability and a bug in security functionality remains uncertain.

References

http://secunia.com/advisories/23265
third-party-advisoryx_refsource_SECUNIA
http://www.xerox.com/downloads/usa/en/c/cert_XRX06_004_v1...
x_refsource_CONFIRM

Timeline

  • Vulnerability Reserved

  • Vulnerability published

.