CVEvulnerability
CVE-2008-0303
6.4 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2008-02-29
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 6.4 MEDIUM — AV:N/AC:L/Au:N/C:N/I:P/A:P
Description
The FTP print feature in multiple Canon printers, including imageRUNNER and imagePRESS, allow remote attackers to use the server as an inadvertent proxy via a modified PORT command, aka FTP bounce.
Affected configurations
• canon i-sensys lbp3360
• canon i-sensys lbp3460
• canon i-sensys lbp5360
• canon imagepress c1
• canon imagerunner 85plus
• canon imagerunner 105plus
• canon imagerunner 2230
• canon imagerunner 2270
• canon imagerunner 2570c
• canon imagerunner 2570ci
• canon imagerunner 2870
• canon imagerunner 3025
• canon imagerunner 3025n
• canon imagerunner 3035
• canon imagerunner 3035n
• canon imagerunner 3045
• canon imagerunner 3045n
• canon imagerunner 3170c
• canon imagerunner 3170ci
• canon imagerunner 3180c
• canon imagerunner 3180ci
• canon imagerunner 3530
• canon imagerunner 3570
• canon imagerunner 4570
• canon imagerunner 5055
• canon imagerunner 5055n
• canon imagerunner 5065
• canon imagerunner 5065n
• canon imagerunner 5075
• canon imagerunner 5075n
• canon imagerunner 5570
• canon imagerunner 5800c
• canon imagerunner 5800cn
• canon imagerunner 6570
• canon imagerunner 6800c
• canon imagerunner 6800cn
• canon imagerunner 7086
• canon imagerunner 7095
• canon imagerunner 7095p
• canon imagerunner 7105
• canon imagerunner 8070
• canon imagerunner c2380i
• canon imagerunner c2620
• canon imagerunner c2620n
• canon imagerunner c2880
• canon imagerunner c2880i
• canon imagerunner c3220n
• canon imagerunner c3380
• canon imagerunner c3380i
• canon imagerunner c4080i
• canon imagerunner c4580i
• canon imagerunner c5185i
• canon imagerunner c5870
• canon imagerunner c5870i
• canon imagerunner c5880
• canon imagerunner c5880i
• canon imagerunner c6870i
• canon imagerunner c6880
• canon imagerunner c6880i
• canon imagerunner clc4040
… and 10 more
References
- http://itso.iu.edu/20080229_Canon_MFD_FTP_bounce_attack itso.iu.edu
- http://jvn.jp/en/jp/JVN10056705/index.html jvn.jp
- http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-000013.html jvndb.jvn.jp
- http://securitytracker.com/id?1019528 securitytracker.com
- http://www.kb.cert.org/vuls/id/568073 US Government Resource
- http://www.securityfocus.com/bid/28042 www.securityfocus.com
- http://www.usa.canon.com/html/security/pdf/CVA-001.pdf www.usa.canon.com
- http://itso.iu.edu/20080229_Canon_MFD_FTP_bounce_attack itso.iu.edu
- http://jvn.jp/en/jp/JVN10056705/index.html jvn.jp
- http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-000013.html jvndb.jvn.jp
- http://securitytracker.com/id?1019528 securitytracker.com
- http://www.kb.cert.org/vuls/id/568073 US Government Resource
- http://www.securityfocus.com/bid/28042 www.securityfocus.com
- http://www.usa.canon.com/html/security/pdf/CVA-001.pdf www.usa.canon.com