Vulnerability Note VU#568073
Canon digital multifunction copiers FTP bounce vulnerability
Some models of Canon digital multifunction copiers are vulnerable to the FTP bounce attack.
From the Problems With The FTP PORT Command document:
The FTP Bounce Attack
Some Canon digital multifunction printers contain an FTP server that is vulnerable to the FTP bounce attack.
A remote, unauthenticated attacker may be able to conduct port scans or send arbitrary (TCP) traffic to other hosts.
We are currently unaware of a practical solution to this problem.
Systems Affected (Learn More)
|Vendor||Status||Date Notified||Date Updated|
|Canon||Affected||-||06 Mar 2008|
CVSS Metrics (Learn More)
Thanks to Canon for information that was used in this report. Canon credits Nate Johnson and the Indiana University for reporting this vulnerability.
This document was written by Ryan Giobbi.
- CVE IDs: CVE-2008-0303
- Date Public: 28 Feb 2008
- Date First Published: 28 Feb 2008
- Date Last Updated: 29 Apr 2008
- Severity Metric: 0.72
- Document Revision: 12
If you have feedback, comments, or additional information about this vulnerability, please send us email.