FKIE_CVE-2005-2646

Vulnerability from fkie_nvd - Published: 2005-08-23 04:00 - Updated: 2026-06-16 22:15
Severity
Summary
Unknown vulnerability in Xerox MicroServer Web Server in Document Centre 220 through 265, 332 and 340, 420 through 490, and 535 through 555 allows remote attackers to cause a denial of service or read files via unknown vectors involving crafted HTTP requests.
References
cve@mitre.orghttp://secunia.com/advisories/16467Patch, Vendor Advisory
cve@mitre.orghttp://securitytracker.com/id?1014720
cve@mitre.orghttp://www.xerox.com/downloads/usa/en/c/cert_XRX05_008.pdfPatch, Vendor Advisory
cve@mitre.orghttp://www.xerox.com/downloads/usa/en/c/cert_XRX05_009.pdfPatch, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108http://secunia.com/advisories/16467Patch, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108http://securitytracker.com/id?1014720
af854a3a-2127-422b-91ae-364da2661108http://www.xerox.com/downloads/usa/en/c/cert_XRX05_008.pdfPatch, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108http://www.xerox.com/downloads/usa/en/c/cert_XRX05_009.pdfPatch, Vendor Advisory
Impacted products
Vendor Product Version
xerox document_centre_220 *
xerox document_centre_230 *
xerox document_centre_240 *
xerox document_centre_255 *
xerox document_centre_265 *
xerox document_centre_332 *
xerox document_centre_340 *
xerox document_centre_420 *
xerox document_centre_425 *
xerox document_centre_426 *
xerox document_centre_430 *
xerox document_centre_432 *
xerox document_centre_440 *
xerox document_centre_460 *
xerox document_centre_470 *
xerox document_centre_480 *
xerox document_centre_490 *
xerox document_centre_535 *
xerox document_centre_545 *
xerox document_centre_555 *
To clipboard 

{
  "affected": [
    {
      "affectedData": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "source": "cve@mitre.org"
    }
  ],
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:xerox:document_centre_220:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "B8590CB4-6437-4198-8D91-3AC1D8E89B23",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:h:xerox:document_centre_230:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "E394086F-8CFD-403D-A531-0C3FFE934565",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:h:xerox:document_centre_240:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "A2101594-5D83-4C12-B5D5-9203FE2FD720",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:h:xerox:document_centre_255:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "66D2D9C0-DC09-48E6-96BB-75C2556F0B8C",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:h:xerox:document_centre_265:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "B6DAC793-6BAB-4816-849F-0450E8822161",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:h:xerox:document_centre_332:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "87C4FC0A-5D67-411F-A759-EEEA7FDECF4D",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:h:xerox:document_centre_340:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "64ECBC0D-65C3-4536-B5CA-6192DBBE4630",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:h:xerox:document_centre_420:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "9F5D7F1E-54BE-4133-AC2B-106F6E2EC712",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:h:xerox:document_centre_425:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "B10F5ABC-3189-4FD8-ACB7-DA59375CB50B",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:h:xerox:document_centre_426:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "31341E77-3A7F-489F-AB60-F2773DD204F8",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:h:xerox:document_centre_430:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "B56B4998-07E7-465B-8C27-1A68A9840A09",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:h:xerox:document_centre_432:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "66A00971-F133-4AEB-B518-28779855A386",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:h:xerox:document_centre_440:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "3DED98FB-1A2C-45A1-A295-766326F24A3C",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:h:xerox:document_centre_460:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "CDFD7441-5745-487A-9BA0-A1E78D6AC0C7",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:h:xerox:document_centre_470:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "732B68E0-F4FD-41B4-8877-72A296A66547",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:h:xerox:document_centre_480:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "5AB6AB90-FB39-465F-8AF5-7C12C2181DFD",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:h:xerox:document_centre_490:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "312C9D9D-A26E-4FAF-A598-A6D29D6BA672",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:h:xerox:document_centre_535:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "945E57F1-7164-4B75-A135-E05062FF0A3F",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:h:xerox:document_centre_545:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "540F4384-01AA-48E2-8677-5BF444D7B0E0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:h:xerox:document_centre_555:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "0A805752-05C3-4CAA-99C7-4C28EF979D67",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Unknown vulnerability in Xerox MicroServer Web Server in Document Centre 220 through 265, 332 and 340, 420 through 490, and 535 through 555 allows remote attackers to cause a denial of service or read files via unknown vectors involving crafted HTTP requests."
    }
  ],
  "id": "CVE-2005-2646",
  "lastModified": "2026-06-16T22:15:23.960",
  "metrics": {
    "cvssMetricV2": [
      {
        "acInsufInfo": false,
        "baseSeverity": "MEDIUM",
        "cvssData": {
          "accessComplexity": "LOW",
          "accessVector": "NETWORK",
          "authentication": "NONE",
          "availabilityImpact": "PARTIAL",
          "baseScore": 6.4,
          "confidentialityImpact": "PARTIAL",
          "integrityImpact": "NONE",
          "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:P",
          "version": "2.0"
        },
        "exploitabilityScore": 10.0,
        "impactScore": 4.9,
        "obtainAllPrivilege": false,
        "obtainOtherPrivilege": false,
        "obtainUserPrivilege": false,
        "source": "nvd@nist.gov",
        "type": "Primary",
        "userInteractionRequired": false
      }
    ]
  },
  "published": "2005-08-23T04:00:00.000",
  "references": [
    {
      "source": "cve@mitre.org",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/16467"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://securitytracker.com/id?1014720"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "url": "http://www.xerox.com/downloads/usa/en/c/cert_XRX05_008.pdf"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "url": "http://www.xerox.com/downloads/usa/en/c/cert_XRX05_009.pdf"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/16467"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://securitytracker.com/id?1014720"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "url": "http://www.xerox.com/downloads/usa/en/c/cert_XRX05_008.pdf"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "url": "http://www.xerox.com/downloads/usa/en/c/cert_XRX05_009.pdf"
    }
  ],
  "sourceIdentifier": "cve@mitre.org",
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-Other"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.


Detection rules are retrieved from Rulezet.