PT-2009-2580 · Kyoceramita · Scanner File Utility

Publicado 2009-08-28 · Atualizado 2018-10-11 · CVE-2008-7111

Mitre

CVSS v2.0

9.3

Alta

Vetor base

AV:N/AC:M/Au:N/C:C/I:C/A:C

The Scanner File Utility (aka listener) in Kyocera Mita (KM) 3.3.0.1 does not restrict the filenames or extensions of uploaded files, which makes it easier for remote attackers to execute arbitrary code or overwrite files by leveraging CVE-2008-7110 and CVE-2008-7109.

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2008-7111

Produtos afetados

Scanner File Utility

Referências · 5

• https://exchange.xforce.ibmcloud.com/vulnerabilities/53003 · Nota
• http://secunia.com/advisories/31631 · Aviso do Fabricante
• http://securityfocus.com/archive/1/495772/100/0/threaded · Nota
• http://informit.com/guides/content.aspx?g=security&seqNum=320 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2008-7111 · Nota de Segurança