PT-2007-3997 · Canon · Canon Network Camera Server Vb100+2

Published 2007-05-15 · Updated 2011-03-08 · CVE-2007-2680

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Canon Network Camera Server VB100 versions 3.0 R69 and earlier Canon Network Camera Server VB101 versions 3.0 R69 and earlier Canon Network Camera Server VB150 versions 1.1 R39 and earlier

Description A cross-site scripting (XSS) issue exists in the management interface, allowing remote attackers to inject arbitrary web script or HTML. This could potentially lead to unauthorized access or control of the camera server.

Recommendations For Canon Network Camera Server VB100 versions 3.0 R69 and earlier, update to a version later than 3.0 R69. For Canon Network Camera Server VB101 versions 3.0 R69 and earlier, update to a version later than 3.0 R69. For Canon Network Camera Server VB150 versions 1.1 R39 and earlier, update to a version later than 1.1 R39.

Fix

Related Identifiers

CVE-2007-2680

Affected Products

Canon Network Camera Server Vb100

Canon Network Camera Server Vb101

Canon Network Camera Server Vb150

References · 7

• http://secunia.com/advisories/24940 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2007-2680 · Security Note
• http://jvn.jp/jp/JVN%2306735665 · Note
• http://securityfocus.com/bid/23560 · Note
• http://vupen.com/english/advisories/2007/1461 · Note
• http://cweb.canon.jp/drv-upd/webview/notification.html · Note
• http://osvdb.org/35019 · Note