JVNDB-2008-000013

FTP bounce vulnerability in multiple Canon digital multifunction copiers and laser beam printers

Multiple Canon digital multifunction copiers and laser beam printers contain a vulnerability that could allow a remote attacker to access other network devices via a built-in FTP server.

The Canon Color imageRUNNER Series, imageRUNNER Series, imagePRESS Series, and laser beam printer series are digital multifunction copiers and printers. Some of these products contain a vulnerability that could allow a remote attacker to access other network devices via a built-in FTP server.

Canon

• imageRUNNER and other devices

A remote attacker could use the FTP server of vulnerable products to conduct port scans against other network devices.

[Change the Setting]

Change the setting according to the information provided by the vendor. For more information, refer to the vendor's website.

Canon

• SECURITY INFORMATION : CVA-001

1. No Mapping(CWE-DesignError) [NVD Evaluation]

1. CVE-2008-0303

1. JVN : JVN#10056705
2. National Vulnerability Database (NVD) : CVE-2008-0303
3. US-CERT Vulnerability Note : VU#568073
4. SecurityFocus : 28042
5. SecurityTracker : 1019528

• [2008/05/21]
    Web page published