Fuji Xerox Printing Systems (FXPS) print engine, as used in products including (1) Dell 3000cn through 5110cn and (2) Fuji Xerox DocuPrint firmware before 20060628 and Network Option Card firmware before 5.13, allows remote attackers to use the FTP printing interface as a proxy ("FTP bounce") by using arbitrary PORT arguments to connect to systems for which access would be otherwise restricted.
References
Configurations
Configuration 1 (hide)
|
History
21 Nov 2024, 00:10
Type | Values Removed | Values Added |
---|---|---|
References | () http://itso.iu.edu/20060824_FXPS_Print_Engine_Vulnerabilities - Patch | |
References | () http://marc.info/?l=bugtraq&m=115652437223454&w=2 - | |
References | () http://secunia.com/advisories/21630 - Vendor Advisory | |
References | () http://secunia.com/advisories/22463 - Vendor Advisory | |
References | () http://www.osvdb.org/28249 - | |
References | () http://www.securityfocus.com/archive/1/444321/100/0/threaded - | |
References | () http://www.securityfocus.com/bid/19711 - | |
References | () http://www.vupen.com/english/advisories/2006/3401 - Vendor Advisory | |
References | () https://exchange.xforce.ibmcloud.com/vulnerabilities/28637 - |
Information
Published : 2006-08-25 01:04
Updated : 2024-11-21 00:10
NVD link : CVE-2006-2112
Mitre link : CVE-2006-2112
CVE.ORG link : CVE-2006-2112
JSON object : View
Products Affected
fuji_xerox
- docuprint_c1616_network_option_card
- docuprint_c525a
- docuprint_c830_network_option_card
- docuprint_181_network_option_card
- docuprint_181
- docuprint_c830
- phaser_6201j
- docuprint_c1616
- docuprint_c525a_network_option_card
- fuji_xerox_printing_systems_print_engine
- docuprint_211
- docuprint_211_network_option_card
- docuprint_c2535a
dell
- 3010cn
- 5100cn
- 3000cn
- 3100cn
- 3110cn
- 5110cn
CWE
CWE-264
Permissions, Privileges, and Access Controls