PT-2008-1944 · Canon · Imagepress+1

Nate Johnson · Publicado 2008-02-29 · Atualizado 2009-03-13 · CVE-2008-0303

Positive Technologies (AI Summary)

CVSS v2.0

6.4

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:P/A:P

Name of the Vulnerable Software and Affected Versions Canon imageRUNNER and imagePRESS printers (affected versions not specified)

Description The issue concerns the FTP print feature in Canon printers, which allows remote attackers to use the server as an inadvertent proxy via a modified PORT command.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

CVE-2008-0303

Produtos afetados

Imagepress

Imagerunner

Referências · 9

• http://securitytracker.com/id?1019528 · Nota
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-0303 · Nota
• http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-000013.html · Nota
• http://itso.iu.edu/20080229_Canon_MFD_FTP_bounce_attack · Nota
• http://securityfocus.com/bid/28042 · Nota
• http://usa.canon.com/html/security/pdf/CVA-001.pdf · Nota
• http://jvn.jp/en/jp/JVN10056705/index.html · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2008-0303 · Nota de Segurança
• http://kb.cert.org/vuls/id/568073 · Nota