CVE-2006-2112

Fuji Xerox Printing Systems (FXPS) print engine, as used in products including (1) Dell 3000cn through 5110cn and (2) Fuji Xerox DocuPrint firmware before 20060628 and Network Option Card firmware before 5.13, allows remote attackers to use the FTP printing interface as a proxy ("FTP bounce") by using arbitrary PORT arguments to connect to systems for which access would be otherwise restricted.

• CWE-264

• http://itso.iu.edu/20060824_FXPS_Print_Engine_VulnerabilitiesPatch
• http://marc.info/?l=bugtraq&m=115652437223454&w=2
• http://secunia.com/advisories/21630Vendor Advisory
• http://secunia.com/advisories/22463Vendor Advisory
• http://www.osvdb.org/28249
• http://www.securityfocus.com/archive/1/444321/100/0/threaded
• http://www.securityfocus.com/bid/19711
• http://www.vupen.com/english/advisories/2006/3401Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/28637
• http://itso.iu.edu/20060824_FXPS_Print_Engine_VulnerabilitiesPatch
• http://marc.info/?l=bugtraq&m=115652437223454&w=2
• http://secunia.com/advisories/21630Vendor Advisory
• http://secunia.com/advisories/22463Vendor Advisory
• http://www.osvdb.org/28249
• http://www.securityfocus.com/archive/1/444321/100/0/threaded
• http://www.securityfocus.com/bid/19711
• http://www.vupen.com/english/advisories/2006/3401Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/28637

Published

Aug 25, 2006

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2006-2106Cross-site scripting (XSS) vulnerability in Edgewall Softwar…
• CVE-2006-2107Buffer overflow in BL4 SMTP Server 0.1.4 and earlier allows …
• CVE-2006-2108parser.exe in Océ (OCE) 3121/3122 Printer allows remote atta…
• CVE-2006-2109Cross-site scripting (XSS) vulnerability in the parse_query_…
• CVE-2006-2110Virtual Private Server (Vserver) 2.0.x before 2.0.2-rc18 and…
• CVE-2006-2111A component in Microsoft Outlook Express 6 allows remote att…
• CVE-2006-2113The embedded HTTP server in Fuji Xerox Printing Systems (FXP…
• CVE-2006-2114Buffer overflow in SWS web Server 0.1.7 allows remote attack…
• CVE-2006-2115Format string vulnerability in SWS web Server 0.1.7 allows r…
• CVE-2006-2116planetGallery allows remote attackers to gain administrator …
• CVE-2006-2117Cross-site scripting (XSS) vulnerability in Thyme 1.3 allows…
• CVE-2006-2118JMK's Picture Gallery allows remote attackers to bypass auth…