{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2006-11-30T00:00:00", "descriptions": [{"lang": "en", "value": "The Web User Interface in Xerox WorkCentre and WorkCentre Pro before 12.060.17.000, 13.x before 13.060.17.000, and 14.x before 14.060.17.000 allows remote attackers to execute arbitrary commands via unspecified vectors involving \"command injection\" in (1) the TCP/IP hostname, (2) Scan-to-mailbox folder names, and (3) certain parameters in the Microsoft Networking configuration. NOTE: vector 1 might be the same as CVE-2006-5290."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2017-07-28T12:57:01", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre"}, "references": [{"tags": ["x_refsource_CONFIRM"], "url": "http://www.xerox.com/downloads/usa/en/c/cert_XRX06_006_v1b.pdf"}, {"tags": ["x_refsource_CONFIRM"], "url": "http://www.xerox.com/downloads/usa/en/c/cert_XRX06_007_v1.pdf"}, {"name": "1017337", "tags": ["vdb-entry", "x_refsource_SECTRACK"], "url": "http://securitytracker.com/id?1017337"}, {"name": "xerox-webui-code-execution(30674)", "tags": ["vdb-entry", "x_refsource_XF"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/30674"}, {"name": "23265", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/23265"}, {"name": "21365", "tags": ["vdb-entry", "x_refsource_BID"], "url": "http://www.securityfocus.com/bid/21365"}, {"name": "ADV-2006-4791", "tags": ["vdb-entry", "x_refsource_VUPEN"], "url": "http://www.vupen.com/english/advisories/2006/4791"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "cve@mitre.org", "ID": "CVE-2006-6427", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "The Web User Interface in Xerox WorkCentre and WorkCentre Pro before 12.060.17.000, 13.x before 13.060.17.000, and 14.x before 14.060.17.000 allows remote attackers to execute arbitrary commands via unspecified vectors involving \"command injection\" in (1) the TCP/IP hostname, (2) Scan-to-mailbox folder names, and (3) certain parameters in the Microsoft Networking configuration. NOTE: vector 1 might be the same as CVE-2006-5290."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "http://www.xerox.com/downloads/usa/en/c/cert_XRX06_006_v1b.pdf", "refsource": "CONFIRM", "url": "http://www.xerox.com/downloads/usa/en/c/cert_XRX06_006_v1b.pdf"}, {"name": "http://www.xerox.com/downloads/usa/en/c/cert_XRX06_007_v1.pdf", "refsource": "CONFIRM", "url": "http://www.xerox.com/downloads/usa/en/c/cert_XRX06_007_v1.pdf"}, {"name": "1017337", "refsource": "SECTRACK", "url": "http://securitytracker.com/id?1017337"}, {"name": "xerox-webui-code-execution(30674)", "refsource": "XF", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/30674"}, {"name": "23265", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/23265"}, {"name": "21365", "refsource": "BID", "url": "http://www.securityfocus.com/bid/21365"}, {"name": "ADV-2006-4791", "refsource": "VUPEN", "url": "http://www.vupen.com/english/advisories/2006/4791"}]}}}}, "cveMetadata": {"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2006-6427", "datePublished": "2006-12-10T11:00:00", "dateReserved": "2006-12-09T00:00:00", "dateUpdated": "2017-07-28T12:57:01", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.0"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:h:xerox:workcentre:12.060.17.000:*:*:*:*:*:*:*", "matchCriteriaId": "BF9C033D-37D1-445F-B0FC-5B388805506D", "vulnerable": true}, {"criteria": "cpe:2.3:h:xerox:workcentre:12.060.17.000:*:pro:*:*:*:*:*", "matchCriteriaId": "216F3E75-F438-4090-980E-E8E4895B7CA0", "vulnerable": true}, {"criteria": "cpe:2.3:h:xerox:workcentre:13.060.17.000:*:*:*:*:*:*:*", "matchCriteriaId": "FA3716B1-3B5F-44A5-A5A2-ADA965536D02", "vulnerable": true}, {"criteria": "cpe:2.3:h:xerox:workcentre:13.060.17.000:*:pro:*:*:*:*:*", "matchCriteriaId": "4A2E5932-2D90-48C2-93F7-D3040F872E35", "vulnerable": true}, {"criteria": "cpe:2.3:h:xerox:workcentre:14.060.17.000:*:*:*:*:*:*:*", "matchCriteriaId": "BEFAD4E9-11AC-425D-A95C-9C722177A51C", "vulnerable": true}, {"criteria": "cpe:2.3:h:xerox:workcentre:14.060.17.000:*:pro:*:*:*:*:*", "matchCriteriaId": "5EF56EDD-26FE-405B-9BAA-E5279E46FD32", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "The Web User Interface in Xerox WorkCentre and WorkCentre Pro before 12.060.17.000, 13.x before 13.060.17.000, and 14.x before 14.060.17.000 allows remote attackers to execute arbitrary commands via unspecified vectors involving \"command injection\" in (1) the TCP/IP hostname, (2) Scan-to-mailbox folder names, and (3) certain parameters in the Microsoft Networking configuration. NOTE: vector 1 might be the same as CVE-2006-5290."}, {"lang": "es", "value": "El Web User Interface en Xerox WorkCentre y WorkCentre Pro anterior a 12.060.17.000, 13.x anterior 13.060.17.000, y 14.x anterior a 14.060.17.000 permite a un atacante remoto ejecutar comandos de sue elecci\u00f3n a trav\u00e9s de vectores no especificados afectando a \"inyecci\u00f3n de comandos\" en (1) TCP/IP hostname,(2)nombres de carpetas Scan-to-mailbox y (3) ciertos par\u00e1metros en la configuraci\u00f3n Microsoft Networking. NOTA: El vector 1 ser\u00eda el mismo que CVE-2006-5290."}], "id": "CVE-2006-6427", "lastModified": "2017-07-29T01:29:31.780", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "HIGH", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 7.5, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "version": "2.0"}, "exploitabilityScore": 10.0, "impactScore": 6.4, "obtainAllPrivilege": false, "obtainOtherPrivilege": true, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}]}, "published": "2006-12-10T11:28:00.000", "references": [{"source": "cve@mitre.org", "tags": ["Vendor Advisory"], "url": "http://secunia.com/advisories/23265"}, {"source": "cve@mitre.org", "tags": ["Vendor Advisory"], "url": "http://securitytracker.com/id?1017337"}, {"source": "cve@mitre.org", "url": "http://www.securityfocus.com/bid/21365"}, {"source": "cve@mitre.org", "tags": ["Vendor Advisory"], "url": "http://www.vupen.com/english/advisories/2006/4791"}, {"source": "cve@mitre.org", "tags": ["Patch"], "url": "http://www.xerox.com/downloads/usa/en/c/cert_XRX06_006_v1b.pdf"}, {"source": "cve@mitre.org", "url": "http://www.xerox.com/downloads/usa/en/c/cert_XRX06_007_v1.pdf"}, {"source": "cve@mitre.org", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/30674"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-78"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{}