Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cveMitreCVE-2008-0303
HistoryFeb 29, 2008 - 2:44 a.m.

CVE-2008-0303

2008-02-2902:44:00
mitre
web.nvd.nist.gov
29
canon
printers
ftp
vulnerability
security
nvd

CVSS2

6.4

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:P/A:P

AI Score

6.5

Confidence

Low

EPSS

0.011

Percentile

84.4%

JSON

The FTP print feature in multiple Canon printers, including imageRUNNER and imagePRESS, allow remote attackers to use the server as an inadvertent proxy via a modified PORT command, aka FTP bounce.

Affected configurations

Nvd
Node
canoni-sensysMatchlbp3360
OR
canoni-sensysMatchlbp3460
OR
canoni-sensysMatchlbp5360
OR
canonimagepressMatchc1
OR
canonimagerunnerMatch85plus
OR
canonimagerunnerMatch105plus
OR
canonimagerunnerMatch2230
OR
canonimagerunnerMatch2270
OR
canonimagerunnerMatch2570c
OR
canonimagerunnerMatch2570ci
OR
canonimagerunnerMatch2870
OR
canonimagerunnerMatch3025
OR
canonimagerunnerMatch3025n
OR
canonimagerunnerMatch3035
OR
canonimagerunnerMatch3035n
OR
canonimagerunnerMatch3045
OR
canonimagerunnerMatch3045n
OR
canonimagerunnerMatch3170c
OR
canonimagerunnerMatch3170ci
OR
canonimagerunnerMatch3180c
OR
canonimagerunnerMatch3180ci
OR
canonimagerunnerMatch3530
OR
canonimagerunnerMatch3570
OR
canonimagerunnerMatch4570
OR
canonimagerunnerMatch5055
OR
canonimagerunnerMatch5055n
OR
canonimagerunnerMatch5065
OR
canonimagerunnerMatch5065n
OR
canonimagerunnerMatch5075
OR
canonimagerunnerMatch5075n
OR
canonimagerunnerMatch5570
OR
canonimagerunnerMatch5800c
OR
canonimagerunnerMatch5800cn
OR
canonimagerunnerMatch6570
OR
canonimagerunnerMatch6800c
OR
canonimagerunnerMatch6800cn
OR
canonimagerunnerMatch7086
OR
canonimagerunnerMatch7095
OR
canonimagerunnerMatch7095p
OR
canonimagerunnerMatch7105
OR
canonimagerunnerMatch8070
OR
canonimagerunnerMatchc2380i
OR
canonimagerunnerMatchc2620
OR
canonimagerunnerMatchc2620n
OR
canonimagerunnerMatchc2880
OR
canonimagerunnerMatchc2880i
OR
canonimagerunnerMatchc3220n
OR
canonimagerunnerMatchc3380
OR
canonimagerunnerMatchc3380i
OR
canonimagerunnerMatchc4080i
OR
canonimagerunnerMatchc4580i
OR
canonimagerunnerMatchc5185i
OR
canonimagerunnerMatchc5870
OR
canonimagerunnerMatchc5870i
OR
canonimagerunnerMatchc5880
OR
canonimagerunnerMatchc5880i
OR
canonimagerunnerMatchc6870i
OR
canonimagerunnerMatchc6880
OR
canonimagerunnerMatchc6880i
OR
canonimagerunnerMatchclc4040
OR
canonimagerunnerMatchclc5151
OR
canonimagerunner_2620
OR
canonimagerunner_5000i
OR
canonimagerunner_5020
OR
canonimagerunner_6870
OR
canonimagerunner_8500
OR
canonimagerunner_9070
OR
canonimagerunner_c3200
OR
canonimagerunner_c3220
OR
canonimagerunner_c6800
VendorProductVersionCPE
canoni-sensyslbp3360cpe:2.3:a:canon:i-sensys:lbp3360:*:*:*:*:*:*:*
canoni-sensyslbp3460cpe:2.3:a:canon:i-sensys:lbp3460:*:*:*:*:*:*:*
canoni-sensyslbp5360cpe:2.3:a:canon:i-sensys:lbp5360:*:*:*:*:*:*:*
canonimagepressc1cpe:2.3:a:canon:imagepress:c1:*:*:*:*:*:*:*
canonimagerunner85pluscpe:2.3:a:canon:imagerunner:85plus:*:*:*:*:*:*:*
canonimagerunner105pluscpe:2.3:a:canon:imagerunner:105plus:*:*:*:*:*:*:*
canonimagerunner2230cpe:2.3:a:canon:imagerunner:2230:*:*:*:*:*:*:*
canonimagerunner2270cpe:2.3:a:canon:imagerunner:2270:*:*:*:*:*:*:*
canonimagerunner2570ccpe:2.3:a:canon:imagerunner:2570c:*:*:*:*:*:*:*
canonimagerunner2570cicpe:2.3:a:canon:imagerunner:2570ci:*:*:*:*:*:*:*
Rows per page:
1-10 of 701

Related

prion 1
securityvulns 2
cvelist 1
cert 1
jvn 1
nvd 1
prion
prion
Design/Logic Flaw
2008-02-29 02:44:00
securityvulns
securityvulns
Canon Multi Function Devices FTP bounce attack
2008-02-29 00:00:00
[Full-disclosure] Canon Multi Function Devices vulnerable to FTP bounce attack
2008-02-29 00:00:00
cvelist
cvelist
CVE-2008-0303
2008-02-29 02:00:00
cert
cert
Canon digital multifunction copiers FTP bounce vulnerability
2008-02-28 00:00:00
jvn
jvn
JVN#10056705 FTP bounce vulnerability in multiple Canon digital multifunction copiers and laser beam printers
2008-03-05 00:00:00
nvd
nvd
CVE-2008-0303
2008-02-29 02:44:00

CVSS2

6.4

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:P/A:P

AI Score

6.5

Confidence

Low

EPSS

0.011

Percentile

84.4%

JSON
Related for CVE-2008-0303
prion1securityvulns2cvelist1cert1jvn1nvd1