CVE-2005-2646
UnknownEPSS 2.06%
Last modified
CVE-2005-2646 is a vulnerability of currently unknown severity. Unknown vulnerability in Xerox MicroServer Web Server in Document Centre 220 through 265, 332 and 340, 420 through 490, and 535 through 555 allows remote attackers to cause a denial of service or read files via unknown vectors involving crafted HTTP requests.. EPSS estimates a 2.06% chance of exploitation in the next 30 days.
Description
Unknown vulnerability in Xerox MicroServer Web Server in Document Centre 220 through 265, 332 and 340, 420 through 490, and 535 through 555 allows remote attackers to cause a denial of service or read files via unknown vectors involving crafted HTTP requests.
Metrics
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Xerox | Document Centre 220 | All versions |
| Xerox | Document Centre 230 | All versions |
| Xerox | Document Centre 240 | All versions |
| Xerox | Document Centre 255 | All versions |
| Xerox | Document Centre 265 | All versions |
| Xerox | Document Centre 332 | All versions |
| Xerox | Document Centre 340 | All versions |
| Xerox | Document Centre 420 | All versions |
| Xerox | Document Centre 425 | All versions |
| Xerox | Document Centre 426 | All versions |
| Xerox | Document Centre 430 | All versions |
| Xerox | Document Centre 432 | All versions |
| Xerox | Document Centre 440 | All versions |
| Xerox | Document Centre 460 | All versions |
| Xerox | Document Centre 470 | All versions |
| Xerox | Document Centre 480 | All versions |
| Xerox | Document Centre 490 | All versions |
| Xerox | Document Centre 535 | All versions |
| Xerox | Document Centre 545 | All versions |
| Xerox | Document Centre 555 | All versions |
References
- http://secunia.com/advisories/16467Patch, Vendor Advisory
- http://www.xerox.com/downloads/usa/en/c/cert_XRX05_008.pdfPatch, Vendor Advisory
- http://www.xerox.com/downloads/usa/en/c/cert_XRX05_009.pdfPatch, Vendor Advisory
- http://secunia.com/advisories/16467Patch, Vendor Advisory
- http://www.xerox.com/downloads/usa/en/c/cert_XRX05_008.pdfPatch, Vendor Advisory
- http://www.xerox.com/downloads/usa/en/c/cert_XRX05_009.pdfPatch, Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2005-2646?
Unknown vulnerability in Xerox MicroServer Web Server in Document Centre 220 through 265, 332 and 340, 420 through 490, and 535 through 555 allows remote attackers to cause a denial of service or read files via unknown vectors involving crafted HTTP requests.
How severe is CVE-2005-2646?
Severity scoring for CVE-2005-2646 is pending analysis. The EPSS model estimates a 2.06% probability of exploitation in the next 30 days.
How do I fix CVE-2005-2646?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2005
- CVE-2005-2640Behavioral discrepancy information leak in Juniper Netscreen…
- CVE-2005-2641Unknown vulnerability in pam_ldap before 180 does not proper…
- CVE-2005-2642Buffer overflow in the mutt_decode_xbit function in Handler.…
- CVE-2005-2643Tor 0.1.0.13 and earlier, and experimental versions 0.1.1.4-…
- CVE-2005-2644Buffer overflow in JaguarEditControl.dll in Isemarket Jaguar…
- CVE-2005-2645Unknown vulnerability in Xerox MicroServer Web Server in Doc…
- CVE-2005-2647Cross-site scripting (XSS) vulnerability in Xerox MicroServe…
- CVE-2005-2648Directory traversal vulnerability in index.php in W-Agora 4.…
- CVE-2005-2649Cross-site scripting (XSS) vulnerability in ATutor 1.5.1 all…
- CVE-2005-2650Cross-site scripting (XSS) vulnerability in sign.asp in Emef…
- CVE-2005-2651gorum/prod.php in Zorum 3.5 allows remote attackers to execu…
- CVE-2005-2652Zorum 3.5 allows remote attackers to obtain the full install…
Are you affected by CVE-2005-2646?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST