CVE-2005-2646

MediumCVSS 6.4/10Last modified Jun 16, 2026

Description

Unknown vulnerability in Xerox MicroServer Web Server in Document Centre 220 through 265, 332 and 340, 420 through 490, and 535 through 555 allows remote attackers to cause a denial of service or read files via unknown vectors involving crafted HTTP requests.

Metrics

CVSS 2.0 6.4/10AV:N/AC:L/Au:N/C:P/I:N/A:P

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://secunia.com/advisories/16467Patch, Vendor Advisory
http://securitytracker.com/id?1014720
http://www.xerox.com/downloads/usa/en/c/cert_XRX05_008.pdfPatch, Vendor Advisory
http://www.xerox.com/downloads/usa/en/c/cert_XRX05_009.pdfPatch, Vendor Advisory
http://secunia.com/advisories/16467Patch, Vendor Advisory
http://securitytracker.com/id?1014720
http://www.xerox.com/downloads/usa/en/c/cert_XRX05_008.pdfPatch, Vendor Advisory
http://www.xerox.com/downloads/usa/en/c/cert_XRX05_009.pdfPatch, Vendor Advisory

Timeline

Published: Aug 23, 2005
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2005

CVE-2005-26474.3Cross-site scripting (XSS) vulnerability in Xerox MicroServer Web Server in Document Centre 220 through 265, 332 and 340, 420 through 490, a CVE-2005-26485.0Directory traversal vulnerability in index.php in W-Agora 4.2.0 and earlier allows remote attackers to read arbitrary files via the site par CVE-2005-26494.3Cross-site scripting (XSS) vulnerability in ATutor 1.5.1 allows remote attackers to inject arbitrary web script or HTML via (1) course param CVE-2005-26504.3Cross-site scripting (XSS) vulnerability in sign.asp in Emefa Guestbook 1.2 allows remote attackers to inject arbitrary web script or HTML v CVE-2005-26517.5gorum/prod.php in Zorum 3.5 allows remote attackers to execute arbitrary code via shell metacharacters in the argv parameter.CVE-2005-26525.0Zorum 3.5 allows remote attackers to obtain the full installation path via direct requests to (1) gorum/notification.php, (2) user.php, (3) CVE-2005-26534.3Cross-site scripting (XSS) vulnerability in BBCaffe 2.0 allows remote attackers to inject arbitrary web script or HTML via e-mail data in a CVE-2005-26547.5phpldapadmin before 0.9.6c allows remote attackers to gain anonymous access to the LDAP server, even when disable_anon_bind is set, via an H CVE-2005-265510.0lockmail in maildrop before 1.5.3 does not drop privileges before executing commands, which allows local users to gain privileges via comman CVE-2005-26562.1Polygen before 1.0.6 generates precompiled grammar objects with world-writable permissions, which allows local users to cause a denial of se CVE-2005-26574.6Unknown vulnerability in common-lisp-controller 4.18 and earlier allows local users to gain privileges by compiling arbitrary code in the ca CVE-2005-26587.5Buffer overflow in utility.cpp in Turquoise SuperStat (turqstat) 2.2.4 and earlier might allow remote NNTP servers to execute arbitrary code