ID CVE-2006-6441
Summary Xerox WorkCentre and WorkCentre Pro before 12.050.03.000, 13.x before 13.050.03.000, and 14.x before 14.050.03.000 allows local users to bypass security controls and boot Alchemy via certain alternate boot media, as demonstrated by a USB thumb drive.
References
Vulnerable Configurations
  • cpe:2.3:h:xerox:workcentre_232:*:*:*:*:*:*:*:*
    cpe:2.3:h:xerox:workcentre_232:*:*:*:*:*:*:*:*
  • cpe:2.3:h:xerox:workcentre_232:*:*:pro:*:*:*:*:*
    cpe:2.3:h:xerox:workcentre_232:*:*:pro:*:*:*:*:*
  • cpe:2.3:h:xerox:workcentre_238:*:*:*:*:*:*:*:*
    cpe:2.3:h:xerox:workcentre_238:*:*:*:*:*:*:*:*
  • cpe:2.3:h:xerox:workcentre_238:*:*:pro:*:*:*:*:*
    cpe:2.3:h:xerox:workcentre_238:*:*:pro:*:*:*:*:*
  • cpe:2.3:h:xerox:workcentre_245:*:*:*:*:*:*:*:*
    cpe:2.3:h:xerox:workcentre_245:*:*:*:*:*:*:*:*
  • cpe:2.3:h:xerox:workcentre_245:*:*:pro:*:*:*:*:*
    cpe:2.3:h:xerox:workcentre_245:*:*:pro:*:*:*:*:*
  • cpe:2.3:h:xerox:workcentre_255:*:*:*:*:*:*:*:*
    cpe:2.3:h:xerox:workcentre_255:*:*:*:*:*:*:*:*
  • cpe:2.3:h:xerox:workcentre_255:*:*:pro:*:*:*:*:*
    cpe:2.3:h:xerox:workcentre_255:*:*:pro:*:*:*:*:*
  • cpe:2.3:h:xerox:workcentre_265:*:*:*:*:*:*:*:*
    cpe:2.3:h:xerox:workcentre_265:*:*:*:*:*:*:*:*
  • cpe:2.3:h:xerox:workcentre_265:*:*:pro:*:*:*:*:*
    cpe:2.3:h:xerox:workcentre_265:*:*:pro:*:*:*:*:*
  • cpe:2.3:h:xerox:workcentre_275:*:*:*:*:*:*:*:*
    cpe:2.3:h:xerox:workcentre_275:*:*:*:*:*:*:*:*
  • cpe:2.3:h:xerox:workcentre_275:*:*:pro:*:*:*:*:*
    cpe:2.3:h:xerox:workcentre_275:*:*:pro:*:*:*:*:*
CVSS
Base: 4.6 (as of 10-09-2008 - 20:39)
Impact:
Exploitability:
CWE NVD-CWE-Other
CAPEC
Access
VectorComplexityAuthentication
LOCAL LOW NONE
Impact
ConfidentialityIntegrityAvailability
PARTIAL PARTIAL PARTIAL
cvss-vector via4 AV:L/AC:L/Au:N/C:P/I:P/A:P
refmap via4
confirm http://www.xerox.com/downloads/usa/en/c/cert_XRX06_004_v11.pdf
secunia 23265
Last major update 10-09-2008 - 20:39
Published 10-12-2006 - 11:28
Last modified 10-09-2008 - 20:39
Back to Top