PT-2008-1944 · Canon · Imagepress+1

Nate Johnson · Published 2008-02-29 · Updated 2009-03-13 · CVE-2008-0303

Positive Technologies (AI Summary)

CVSS v2.0

6.4

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:P/A:P

Name of the Vulnerable Software and Affected Versions Canon imageRUNNER and imagePRESS printers (affected versions not specified)

Description The issue concerns the FTP print feature in Canon printers, which allows remote attackers to use the server as an inadvertent proxy via a modified PORT command.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2008-0303

Affected Products

Imagepress

Imagerunner

References · 9

• https://nvd.nist.gov/vuln/detail/CVE-2008-0303 · Security Note
• http://securitytracker.com/id?1019528 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-0303 · Note
• http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-000013.html · Note
• http://itso.iu.edu/20080229_Canon_MFD_FTP_bounce_attack · Note
• http://securityfocus.com/bid/28042 · Note
• http://usa.canon.com/html/security/pdf/CVA-001.pdf · Note
• http://jvn.jp/en/jp/JVN10056705/index.html · Note
• http://kb.cert.org/vuls/id/568073 · Note