FKIE_CVE-2006-1137

Vulnerability from fkie_nvd - Published: 2006-03-10 02:02 - Updated: 2026-04-16 00:27
Severity
Summary
Multiple unspecified vulnerabilities in Xerox CopyCentre and Xerox WorkCentre Pro, running software 1.001.02.073 or earlier, or 1.001.02.074 before 1.001.02.715, allow remote attackers to cause an unspecified denial of service via a crafted PostScript file that will (1) "navigate through the directory" or (2) a "file sent to expose TCP/IP ports".
References
cve@mitre.orghttp://secunia.com/advisories/19146Third Party Advisory
cve@mitre.orghttp://securitytracker.com/id?1015738Third Party Advisory, VDB Entry
cve@mitre.orghttp://www.osvdb.org/23725Broken Link
cve@mitre.orghttp://www.osvdb.org/23726Broken Link
cve@mitre.orghttp://www.securityfocus.com/bid/17014Third Party Advisory, VDB Entry
cve@mitre.orghttp://www.vupen.com/english/advisories/2006/0857Permissions Required, Third Party Advisory
cve@mitre.orghttp://www.xerox.com/downloads/usa/en/c/cert_XRX06_002.pdfBroken Link, Vendor Advisory
cve@mitre.orghttps://exchange.xforce.ibmcloud.com/vulnerabilities/25173Third Party Advisory, VDB Entry
cve@mitre.orghttps://exchange.xforce.ibmcloud.com/vulnerabilities/25174Third Party Advisory, VDB Entry
af854a3a-2127-422b-91ae-364da2661108http://secunia.com/advisories/19146Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108http://securitytracker.com/id?1015738Third Party Advisory, VDB Entry
af854a3a-2127-422b-91ae-364da2661108http://www.osvdb.org/23725Broken Link
af854a3a-2127-422b-91ae-364da2661108http://www.osvdb.org/23726Broken Link
af854a3a-2127-422b-91ae-364da2661108http://www.securityfocus.com/bid/17014Third Party Advisory, VDB Entry
af854a3a-2127-422b-91ae-364da2661108http://www.vupen.com/english/advisories/2006/0857Permissions Required, Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108http://www.xerox.com/downloads/usa/en/c/cert_XRX06_002.pdfBroken Link, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108https://exchange.xforce.ibmcloud.com/vulnerabilities/25173Third Party Advisory, VDB Entry
af854a3a-2127-422b-91ae-364da2661108https://exchange.xforce.ibmcloud.com/vulnerabilities/25174Third Party Advisory, VDB Entry
Impacted products
Vendor Product Version
xerox copycentre_c65_firmware *
xerox copycentre_c65_firmware *
xerox copycentre_c65 -
xerox copycentre_c75_firmware *
xerox copycentre_c75_firmware *
xerox copycentre_c75 -
xerox copycentre_c90_firmware *
xerox copycentre_c90_firmware *
xerox copycentre_c90 -
xerox workcentre_pro_65_firmware *
xerox workcentre_pro_65_firmware *
xerox workcentre_pro_65 -
xerox workcentre_pro_75_firmware *
xerox workcentre_pro_75_firmware *
xerox workcentre_pro_75 -
xerox workcentre_pro_90_firmware *
xerox workcentre_pro_90_firmware *
xerox workcentre_pro_90 -
To clipboard 

{
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:xerox:copycentre_c65_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "3990D0EA-68B9-46C3-A2AC-2970F7DE56EB",
              "versionEndIncluding": "1.001.02.073",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:xerox:copycentre_c65_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "1AF27E12-AF64-4375-9179-4B67D93223BE",
              "versionEndExcluding": "1.001.02.715",
              "versionStartIncluding": "1.001.02.074",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:xerox:copycentre_c65:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "515AA8E2-979F-4029-8266-161042FC1373",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:xerox:copycentre_c75_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "5622C685-2A88-47FD-86F0-74F7F37B94C0",
              "versionEndIncluding": "1.001.02.073",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:xerox:copycentre_c75_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "64D2DE23-49FC-4C44-9093-C5FF16F96C26",
              "versionEndExcluding": "1.001.02.715",
              "versionStartIncluding": "1.001.02.074",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:xerox:copycentre_c75:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "28F89EFA-9E63-4C8B-B6CF-C7F643276297",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:xerox:copycentre_c90_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "2FDB3F54-0B7C-4416-AAB1-05FCBE162973",
              "versionEndIncluding": "1.001.02.073",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:xerox:copycentre_c90_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "FE102A83-B93A-4AA5-976F-93A8FE3407D0",
              "versionEndExcluding": "1.001.02.715",
              "versionStartIncluding": "1.001.02.074",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:xerox:copycentre_c90:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "14DE0A31-AECB-4E83-9868-77E59B6FDE87",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:xerox:workcentre_pro_65_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "B04761D4-8599-4138-B5D8-B0AF31C1E20F",
              "versionEndIncluding": "1.001.02.073",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:xerox:workcentre_pro_65_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "536C933B-861D-44F8-9C25-F1C88E7628B9",
              "versionEndExcluding": "1.001.02.715",
              "versionStartIncluding": "1.001.02.074",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:xerox:workcentre_pro_65:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "15799164-2121-4045-9305-9D142021D418",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:xerox:workcentre_pro_75_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "07982BB5-1666-458B-84B4-89066CAD4345",
              "versionEndIncluding": "1.001.02.073",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:xerox:workcentre_pro_75_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "8C2142D7-74D9-4349-8EB6-E5AAB93CA705",
              "versionEndExcluding": "1.001.02.715",
              "versionStartIncluding": "1.001.02.074",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:xerox:workcentre_pro_75:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "8FFA93FE-EE4A-4E4C-BF99-4AF901D5A3FD",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:xerox:workcentre_pro_90_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "9B2D1781-6879-4989-A68B-5E40A023CFD7",
              "versionEndIncluding": "1.001.02.073",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:xerox:workcentre_pro_90_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "5DB10EBC-080B-4BFA-BA80-B47FA04285BC",
              "versionEndExcluding": "1.001.02.715",
              "versionStartIncluding": "1.001.02.074",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:xerox:workcentre_pro_90:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "6E08F806-1E3A-426B-B7E0-37B0C774D44F",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Multiple unspecified vulnerabilities in Xerox CopyCentre and Xerox WorkCentre Pro, running software 1.001.02.073 or earlier, or 1.001.02.074 before 1.001.02.715, allow remote attackers to cause an unspecified denial of service via a crafted PostScript file that will (1) \"navigate through the directory\" or (2) a \"file sent to expose TCP/IP ports\"."
    }
  ],
  "id": "CVE-2006-1137",
  "lastModified": "2026-04-16T00:27:16.627",
  "metrics": {
    "cvssMetricV2": [
      {
        "acInsufInfo": false,
        "baseSeverity": "MEDIUM",
        "cvssData": {
          "accessComplexity": "LOW",
          "accessVector": "NETWORK",
          "authentication": "NONE",
          "availabilityImpact": "PARTIAL",
          "baseScore": 5.0,
          "confidentialityImpact": "NONE",
          "integrityImpact": "NONE",
          "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P",
          "version": "2.0"
        },
        "exploitabilityScore": 10.0,
        "impactScore": 2.9,
        "obtainAllPrivilege": false,
        "obtainOtherPrivilege": false,
        "obtainUserPrivilege": false,
        "source": "nvd@nist.gov",
        "type": "Primary",
        "userInteractionRequired": false
      }
    ]
  },
  "published": "2006-03-10T02:02:00.000",
  "references": [
    {
      "source": "cve@mitre.org",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "http://secunia.com/advisories/19146"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "url": "http://securitytracker.com/id?1015738"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Broken Link"
      ],
      "url": "http://www.osvdb.org/23725"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Broken Link"
      ],
      "url": "http://www.osvdb.org/23726"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "url": "http://www.securityfocus.com/bid/17014"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Permissions Required",
        "Third Party Advisory"
      ],
      "url": "http://www.vupen.com/english/advisories/2006/0857"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Broken Link",
        "Vendor Advisory"
      ],
      "url": "http://www.xerox.com/downloads/usa/en/c/cert_XRX06_002.pdf"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/25173"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/25174"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "http://secunia.com/advisories/19146"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "url": "http://securitytracker.com/id?1015738"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Broken Link"
      ],
      "url": "http://www.osvdb.org/23725"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Broken Link"
      ],
      "url": "http://www.osvdb.org/23726"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "url": "http://www.securityfocus.com/bid/17014"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Permissions Required",
        "Third Party Advisory"
      ],
      "url": "http://www.vupen.com/english/advisories/2006/0857"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Broken Link",
        "Vendor Advisory"
      ],
      "url": "http://www.xerox.com/downloads/usa/en/c/cert_XRX06_002.pdf"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/25173"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/25174"
    }
  ],
  "sourceIdentifier": "cve@mitre.org",
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-Other"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.


Detection rules are retrieved from Rulezet.