Remote Access Vulnerability in Xerox WorkCentre Affected Products
CVE-2006-6472

Currently unrated

Key Information:

Vendor
Xerox
Status
Workcentre
Vendor
CVE Published:
11 December 2006

Summary

The httpd.conf configuration file in several models of Xerox WorkCentre and WorkCentre Pro has a setting that keeps port 443 active at all times. This misconfiguration presents potential security risks as it could expose the system to remote attacks without clearly defined impacts. The affected versions include WorkCentre before version 12.050.03.000, WorkCentre Pro before version 12.050.03.000, WorkCentre Pro version 13.x before 13.050.03.000, and WorkCentre version 14.x before 14.050.03.000.

References

http://secunia.com/advisories/23265
third-party-advisoryx_refsource_SECUNIA
http://www.xerox.com/downloads/usa/en/c/cert_XRX06_004_v1...
x_refsource_CONFIRM

Timeline

  • Vulnerability Reserved

  • Vulnerability published

.