Nate Johnson

**Name of the Vulnerable Software and Affected Versions** Canon imageRUNNER and imagePRESS printers (affected versions not specified) **Description** The issue concerns the FTP print feature in Canon printers, which allows remote attackers to use the server as an inadvertent proxy via a modified PORT command. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Fuji Xerox Printing Systems (FXPS) print engine versions used in Dell 3000cn through 5110cn Fuji Xerox DocuPrint firmware prior to 20060628 Fuji Xerox Network Option Card firmware prior to 5.13 **Description** The issue allows remote attackers to use the FTP printing interface as a proxy, also known as "FTP bounce", by using arbitrary PORT arguments to connect to systems for which access would be otherwise restricted. **Recommendations** For Fuji Xerox Printing Systems (FXPS) print engine versions used in Dell 3000cn through 5110cn, update the firmware to a version that is not affected by this issue. For Fuji Xerox DocuPrint firmware prior to 20060628, update the firmware to version 20060628 or later. For Fuji Xerox Network Option Card firmware prior to 5.13, update the firmware to version 5.13 or later.