CVE-2006-2112
Severity Score
7.5
*CVSS v2
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
Fuji Xerox Printing Systems (FXPS) print engine, as used in products including (1) Dell 3000cn through 5110cn and (2) Fuji Xerox DocuPrint firmware before 20060628 and Network Option Card firmware before 5.13, allows remote attackers to use the FTP printing interface as a proxy ("FTP bounce") by using arbitrary PORT arguments to connect to systems for which access would be otherwise restricted.
Motor de impresión Fuji Xerox Printing Systems (FXPS), como se usa en productos incluyendo (1) Dell 3000cn hasta la versión 5110cn y (2) firmware Fuji Xerox DocuPrint en versiones anteriores a 20060628 y firmware Network Option Card en versiones anteriores a 5.13, permite a atacantes utilizar la interfaz de impresión FTP como un proxy ("FTP bounce") utilizando argumentos PORT arbitrarios para conectarse a sistemas para los cuales el acceso estaría de lo contrario restringido.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2006-05-01 CVE Reserved
- 2006-08-25 CVE Published
- 2024-01-17 EPSS Updated
- 2024-08-07 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-264: Permissions, Privileges, and Access Controls
CAPEC
References (9)
| URL | Tag | Source |
|---|---|---|
| http://marc.info/?l=bugtraq&m=115652437223454&w=2 | Mailing List | |
| http://www.osvdb.org/28249 | Vdb Entry | |
| http://www.securityfocus.com/archive/1/444321/100/0/threaded | Mailing List | |
| http://www.securityfocus.com/bid/19711 | Vdb Entry | |
| https://exchange.xforce.ibmcloud.com/vulnerabilities/28637 | Vdb Entry |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| http://itso.iu.edu/20060824_FXPS_Print_Engine_Vulnerabilities | 2018-10-18 |
| URL | Date | SRC |
|---|---|---|
| http://secunia.com/advisories/21630 | 2018-10-18 | |
| http://secunia.com/advisories/22463 | 2018-10-18 | |
| http://www.vupen.com/english/advisories/2006/3401 | 2018-10-18 |
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Dell Search vendor "Dell" | 3000cn Search vendor "Dell" for product "3000cn" | * | - |
Affected
| ||||||
| Dell Search vendor "Dell" | 3010cn Search vendor "Dell" for product "3010cn" | * | - |
Affected
| ||||||
| Dell Search vendor "Dell" | 3100cn Search vendor "Dell" for product "3100cn" | * | - |
Affected
| ||||||
| Dell Search vendor "Dell" | 3110cn Search vendor "Dell" for product "3110cn" | * | - |
Affected
| ||||||
| Dell Search vendor "Dell" | 5100cn Search vendor "Dell" for product "5100cn" | * | - |
Affected
| ||||||
| Dell Search vendor "Dell" | 5110cn Search vendor "Dell" for product "5110cn" | * | - |
Affected
| ||||||
| Fuji Xerox Search vendor "Fuji Xerox" | Docuprint 181 Search vendor "Fuji Xerox" for product "Docuprint 181" | * | - |
Affected
| ||||||
| Fuji Xerox Search vendor "Fuji Xerox" | Docuprint 181 Network Option Card Search vendor "Fuji Xerox" for product "Docuprint 181 Network Option Card" | * | - |
Affected
| ||||||
| Fuji Xerox Search vendor "Fuji Xerox" | Docuprint 211 Search vendor "Fuji Xerox" for product "Docuprint 211" | * | - |
Affected
| ||||||
| Fuji Xerox Search vendor "Fuji Xerox" | Docuprint 211 Network Option Card Search vendor "Fuji Xerox" for product "Docuprint 211 Network Option Card" | * | - |
Affected
| ||||||
| Fuji Xerox Search vendor "Fuji Xerox" | Docuprint C1616 Search vendor "Fuji Xerox" for product "Docuprint C1616" | * | - |
Affected
| ||||||
| Fuji Xerox Search vendor "Fuji Xerox" | Docuprint C1616 Network Option Card Search vendor "Fuji Xerox" for product "Docuprint C1616 Network Option Card" | * | - |
Affected
| ||||||
| Fuji Xerox Search vendor "Fuji Xerox" | Docuprint C2535a Search vendor "Fuji Xerox" for product "Docuprint C2535a" | * | - |
Affected
| ||||||
| Fuji Xerox Search vendor "Fuji Xerox" | Docuprint C525a Search vendor "Fuji Xerox" for product "Docuprint C525a" | * | - |
Affected
| ||||||
| Fuji Xerox Search vendor "Fuji Xerox" | Docuprint C525a Network Option Card Search vendor "Fuji Xerox" for product "Docuprint C525a Network Option Card" | * | - |
Affected
| ||||||
| Fuji Xerox Search vendor "Fuji Xerox" | Docuprint C830 Search vendor "Fuji Xerox" for product "Docuprint C830" | * | - |
Affected
| ||||||
| Fuji Xerox Search vendor "Fuji Xerox" | Docuprint C830 Network Option Card Search vendor "Fuji Xerox" for product "Docuprint C830 Network Option Card" | * | - |
Affected
| ||||||
| Fuji Xerox Search vendor "Fuji Xerox" | Fuji Xerox Printing Systems Print Engine Search vendor "Fuji Xerox" for product "Fuji Xerox Printing Systems Print Engine" | * | - |
Affected
| ||||||
| Fuji Xerox Search vendor "Fuji Xerox" | Phaser 6201j Search vendor "Fuji Xerox" for product "Phaser 6201j" | * | - |
Affected
| ||||||