Vulnerability-Lookup

CVE-2008-0303 (GCVE-0-2008-0303)

Vulnerability from cvelistv5 – Published: 2008-02-29 02:00 – Updated: 2024-08-07 07:39

Summary

The FTP print feature in multiple Canon printers, including imageRUNNER and imagePRESS, allow remote attackers to use the server as an inadvertent proxy via a modified PORT command, aka FTP bounce.

Severity

No CVSS data available.

CWE

Assigner

mitre mitre root

References

7 references

URL	Tags
http://www.kb.cert.org/vuls/id/568073	third-party-advisoryx_refsource_CERT-VN
http://www.securityfocus.com/bid/28042	vdb-entryx_refsource_BID
http://jvn.jp/en/jp/JVN10056705/index.html	third-party-advisoryx_refsource_JVN
http://itso.iu.edu/20080229_Canon_MFD_FTP_bounce_attack	x_refsource_MISC
http://securitytracker.com/id?1019528	vdb-entryx_refsource_SECTRACK
http://www.usa.canon.com/html/security/pdf/CVA-001.pdf	x_refsource_CONFIRM
http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-0…	third-party-advisoryx_refsource_JVNDB

Date Public

2008-02-28 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T07:39:34.226Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "VU#568073",
            "tags": [
              "third-party-advisory",
              "x_refsource_CERT-VN",
              "x_transferred"
            ],
            "url": "http://www.kb.cert.org/vuls/id/568073"
          },
          {
            "name": "28042",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/28042"
          },
          {
            "name": "JVN#10056705",
            "tags": [
              "third-party-advisory",
              "x_refsource_JVN",
              "x_transferred"
            ],
            "url": "http://jvn.jp/en/jp/JVN10056705/index.html"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://itso.iu.edu/20080229_Canon_MFD_FTP_bounce_attack"
          },
          {
            "name": "1019528",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://securitytracker.com/id?1019528"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.usa.canon.com/html/security/pdf/CVA-001.pdf"
          },
          {
            "name": "JVNDB-2008-000013",
            "tags": [
              "third-party-advisory",
              "x_refsource_JVNDB",
              "x_transferred"
            ],
            "url": "http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-000013.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2008-02-28T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "The FTP print feature in multiple Canon printers, including imageRUNNER and imagePRESS, allow remote attackers to use the server as an inadvertent proxy via a modified PORT command, aka FTP bounce."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2009-03-13T09:00:00.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "VU#568073",
          "tags": [
            "third-party-advisory",
            "x_refsource_CERT-VN"
          ],
          "url": "http://www.kb.cert.org/vuls/id/568073"
        },
        {
          "name": "28042",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/28042"
        },
        {
          "name": "JVN#10056705",
          "tags": [
            "third-party-advisory",
            "x_refsource_JVN"
          ],
          "url": "http://jvn.jp/en/jp/JVN10056705/index.html"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://itso.iu.edu/20080229_Canon_MFD_FTP_bounce_attack"
        },
        {
          "name": "1019528",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://securitytracker.com/id?1019528"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.usa.canon.com/html/security/pdf/CVA-001.pdf"
        },
        {
          "name": "JVNDB-2008-000013",
          "tags": [
            "third-party-advisory",
            "x_refsource_JVNDB"
          ],
          "url": "http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-000013.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2008-0303",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The FTP print feature in multiple Canon printers, including imageRUNNER and imagePRESS, allow remote attackers to use the server as an inadvertent proxy via a modified PORT command, aka FTP bounce."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "VU#568073",
              "refsource": "CERT-VN",
              "url": "http://www.kb.cert.org/vuls/id/568073"
            },
            {
              "name": "28042",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/28042"
            },
            {
              "name": "JVN#10056705",
              "refsource": "JVN",
              "url": "http://jvn.jp/en/jp/JVN10056705/index.html"
            },
            {
              "name": "http://itso.iu.edu/20080229_Canon_MFD_FTP_bounce_attack",
              "refsource": "MISC",
              "url": "http://itso.iu.edu/20080229_Canon_MFD_FTP_bounce_attack"
            },
            {
              "name": "1019528",
              "refsource": "SECTRACK",
              "url": "http://securitytracker.com/id?1019528"
            },
            {
              "name": "http://www.usa.canon.com/html/security/pdf/CVA-001.pdf",
              "refsource": "CONFIRM",
              "url": "http://www.usa.canon.com/html/security/pdf/CVA-001.pdf"
            },
            {
              "name": "JVNDB-2008-000013",
              "refsource": "JVNDB",
              "url": "http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-000013.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2008-0303",
    "datePublished": "2008-02-29T02:00:00.000Z",
    "dateReserved": "2008-01-16T00:00:00.000Z",
    "dateUpdated": "2024-08-07T07:39:34.226Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2008-0303",
      "date": "2026-09-20",
      "epss": "0.02051",
      "percentile": "0.80384"
    },
    "nvd": {
      "cve": {
        "configurations": [
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:a:canon:i-sensys:lbp3360:*:*:*:*:*:*:*",
                    "matchCriteriaId": "6D5527A3-316B-4C5C-9499-E90A9B3ED521",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:canon:i-sensys:lbp3460:*:*:*:*:*:*:*",
                    "matchCriteriaId": "ACAFBF89-8C4D-4F18-BDB8-F7E5D5E18658",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:canon:i-sensys:lbp5360:*:*:*:*:*:*:*",
                    "matchCriteriaId": "D090A27B-BDEF-45CB-ADDD-02C787401682",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:canon:imagepress:c1:*:*:*:*:*:*:*",
                    "matchCriteriaId": "7A8A809D-AE44-439B-850A-A4C282E2879D",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:canon:imagerunner:85plus:*:*:*:*:*:*:*",
                    "matchCriteriaId": "956D38C1-63EB-484A-86E1-8FFFBB4F2687",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:canon:imagerunner:105plus:*:*:*:*:*:*:*",
                    "matchCriteriaId": "92429901-A557-4CCD-9014-1EA32D1D738C",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:canon:imagerunner:2230:*:*:*:*:*:*:*",
                    "matchCriteriaId": "38E229C8-C530-4EF1-8582-E50000DDC676",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:canon:imagerunner:2270:*:*:*:*:*:*:*",
                    "matchCriteriaId": "05045F4F-C2BD-4215-AB82-060A9C8E5C0E",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:canon:imagerunner:2570c:*:*:*:*:*:*:*",
                    "matchCriteriaId": "47F18BD2-8628-4D74-AB71-1F07C45AA865",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:canon:imagerunner:2570ci:*:*:*:*:*:*:*",
                    "matchCriteriaId": "A2191AA9-6EAD-401E-A831-7EAFF1D1AE4C",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:canon:imagerunner:2870:*:*:*:*:*:*:*",
                    "matchCriteriaId": "AB25A914-5F7D-4134-B8D3-9FEE77D1E004",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:canon:imagerunner:3025:*:*:*:*:*:*:*",
                    "matchCriteriaId": "CBBB4571-76C9-44D6-85BF-A3A4EAEF30A8",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:canon:imagerunner:3025n:*:*:*:*:*:*:*",
                    "matchCriteriaId": "1EB2555A-4596-4502-9F3D-1C863A49A7C4",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:canon:imagerunner:3035:*:*:*:*:*:*:*",
                    "matchCriteriaId": "7D230D14-2B2D-4005-A613-45AC1BCE881F",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:canon:imagerunner:3035n:*:*:*:*:*:*:*",
                    "matchCriteriaId": "3C8E5E7F-2A49-4EE1-8AF3-7A10D35A0C7A",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:canon:imagerunner:3045:*:*:*:*:*:*:*",
                    "matchCriteriaId": "BB5F8120-3BB9-4922-A210-3EC2DE905824",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:canon:imagerunner:3045n:*:*:*:*:*:*:*",
                    "matchCriteriaId": "98C7BF9D-12DD-48AF-8CA2-F7FBE975827B",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:canon:imagerunner:3170c:*:*:*:*:*:*:*",
                    "matchCriteriaId": "522C81B2-8565-42B0-986A-AA529B68CE73",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:canon:imagerunner:3170ci:*:*:*:*:*:*:*",
                    "matchCriteriaId": "3D2BED79-2917-43D3-9B8F-AFE6103B780D",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:canon:imagerunner:3180c:*:*:*:*:*:*:*",
                    "matchCriteriaId": "FFAE5078-589D-4B69-BB89-0F639B63A617",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:canon:imagerunner:3180ci:*:*:*:*:*:*:*",
                    "matchCriteriaId": "52D2110B-56A3-4288-A81D-C9EB43602AE6",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:canon:imagerunner:3530:*:*:*:*:*:*:*",
                    "matchCriteriaId": "83390EF6-E058-48C2-89C0-B05973017958",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:canon:imagerunner:3570:*:*:*:*:*:*:*",
                    "matchCriteriaId": "D6B4AA49-EF73-44B9-BF36-7ACA3AF83865",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:canon:imagerunner:4570:*:*:*:*:*:*:*",
                    "matchCriteriaId": "51C2944E-3FBC-465F-A2B5-35051F0531CC",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:canon:imagerunner:5055:*:*:*:*:*:*:*",
                    "matchCriteriaId": "D2E74C0F-E5DC-446A-AB63-47EC0A733E7C",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:canon:imagerunner:5055n:*:*:*:*:*:*:*",
                    "matchCriteriaId": "B10EB3DD-F392-46E0-ADC0-10DA2AF44731",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:canon:imagerunner:5065:*:*:*:*:*:*:*",
                    "matchCriteriaId": "1AAE2C40-18E7-4BA5-B121-2363D973257B",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:canon:imagerunner:5065n:*:*:*:*:*:*:*",
                    "matchCriteriaId": "FFCFF25F-5974-40D0-916D-065A5899647B",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:canon:imagerunner:5075:*:*:*:*:*:*:*",
                    "matchCriteriaId": "040BE6F9-5F1C-4E4C-825D-3F9EB35A7D6A",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:canon:imagerunner:5075n:*:*:*:*:*:*:*",
                    "matchCriteriaId": "FF5B10EF-4DEF-4B82-A3E2-ABABCEC4FA9A",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:canon:imagerunner:5570:*:*:*:*:*:*:*",
                    "matchCriteriaId": "FB74285C-E11C-490A-970A-39B467AA9AF0",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:canon:imagerunner:5800c:*:*:*:*:*:*:*",
                    "matchCriteriaId": "D4F0C391-0A24-4A71-B700-AC7968B18B96",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:canon:imagerunner:5800cn:*:*:*:*:*:*:*",
                    "matchCriteriaId": "00810DAE-7457-4FBF-95C9-E1AF355D7C9C",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:canon:imagerunner:6570:*:*:*:*:*:*:*",
                    "matchCriteriaId": "9A409632-8511-4EC0-BB5F-743C9A14CBFB",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:canon:imagerunner:6800c:*:*:*:*:*:*:*",
                    "matchCriteriaId": "C116560B-00B6-4BCF-9349-EE345D07E0EA",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:canon:imagerunner:6800cn:*:*:*:*:*:*:*",
                    "matchCriteriaId": "A2EC135D-87E6-40EE-A699-B7501ADF5D9E",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:canon:imagerunner:7086:*:*:*:*:*:*:*",
                    "matchCriteriaId": "17866E3B-F0AB-4776-8337-7F297613A766",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:canon:imagerunner:7095:*:*:*:*:*:*:*",
                    "matchCriteriaId": "C15C1554-F055-457F-B1EB-99214798BD92",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:canon:imagerunner:7095p:*:*:*:*:*:*:*",
                    "matchCriteriaId": "CEE290B3-F248-4F79-B971-6658845E531F",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:canon:imagerunner:7105:*:*:*:*:*:*:*",
                    "matchCriteriaId": "786EC60E-A890-4236-AEC4-1815CBE36404",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:canon:imagerunner:8070:*:*:*:*:*:*:*",
                    "matchCriteriaId": "10B23884-6B28-4E91-9207-C0B43A8911BF",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:canon:imagerunner:c2380i:*:*:*:*:*:*:*",
                    "matchCriteriaId": "0FBAD1AD-E705-4BB1-B308-C33B4F4FBF7D",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:canon:imagerunner:c2620:*:*:*:*:*:*:*",
                    "matchCriteriaId": "6A3547DD-7C0B-4ED6-B361-25FD0D0C0FDC",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:canon:imagerunner:c2620n:*:*:*:*:*:*:*",
                    "matchCriteriaId": "4B8527DA-E3A3-4CBD-AD8D-643314BFA0DD",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:canon:imagerunner:c2880:*:*:*:*:*:*:*",
                    "matchCriteriaId": "1D82E498-D467-42E7-B82B-DB970A8584F2",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:canon:imagerunner:c2880i:*:*:*:*:*:*:*",
                    "matchCriteriaId": "6DCF3699-B5FA-4E48-8C95-20FA7ADA6EAF",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:canon:imagerunner:c3220n:*:*:*:*:*:*:*",
                    "matchCriteriaId": "AC02E198-284C-45BE-8CB2-0AE1BED06FFA",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:canon:imagerunner:c3380:*:*:*:*:*:*:*",
                    "matchCriteriaId": "3194031C-A77E-4DB1-8AA1-394D9D0069F0",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:canon:imagerunner:c3380i:*:*:*:*:*:*:*",
                    "matchCriteriaId": "F9795579-0C94-4704-94B6-419390055B89",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:canon:imagerunner:c4080i:*:*:*:*:*:*:*",
                    "matchCriteriaId": "C13F455D-7C30-45D3-8987-5EFD05930679",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:canon:imagerunner:c4580i:*:*:*:*:*:*:*",
                    "matchCriteriaId": "0BDB208C-9DFD-41D2-8563-6637958938F4",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:canon:imagerunner:c5185i:*:*:*:*:*:*:*",
                    "matchCriteriaId": "5EB8CBCB-7C3D-4D7F-92A9-07EE65D44864",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:canon:imagerunner:c5870:*:*:*:*:*:*:*",
                    "matchCriteriaId": "8944BA6B-1CE1-4548-BF12-AA00972869BB",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:canon:imagerunner:c5870i:*:*:*:*:*:*:*",
                    "matchCriteriaId": "311E74FA-8C6E-4186-95CB-57579796BF4A",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:canon:imagerunner:c5880:*:*:*:*:*:*:*",
                    "matchCriteriaId": "8DBD69F8-B40C-4189-93D4-6A7E611B31B0",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:canon:imagerunner:c5880i:*:*:*:*:*:*:*",
                    "matchCriteriaId": "1E5E4B7A-F8CB-4D01-BFF1-E2F2B4B680C7",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:canon:imagerunner:c6870i:*:*:*:*:*:*:*",
                    "matchCriteriaId": "B5D65FD6-90A3-4048-973D-1D6404B1CA57",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:canon:imagerunner:c6880:*:*:*:*:*:*:*",
                    "matchCriteriaId": "3415DF9C-CE4A-499E-A032-D0C66AA0E37E",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:canon:imagerunner:c6880i:*:*:*:*:*:*:*",
                    "matchCriteriaId": "3CD97A28-761D-482F-8A3C-1BE80B356E84",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:canon:imagerunner:clc4040:*:*:*:*:*:*:*",
                    "matchCriteriaId": "9CE907E6-6033-429D-948C-F0C67CFB39A3",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:canon:imagerunner:clc5151:*:*:*:*:*:*:*",
                    "matchCriteriaId": "ACE2BDF2-D17A-4ABB-82A3-F0B94064824D",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:canon:imagerunner_2620:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "3E4C7D11-EE90-4E10-9BBB-9CDC55467A2B",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:canon:imagerunner_5000i:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "83EB4A89-5470-4B7E-B09D-3CC1D7CC7F4E",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:canon:imagerunner_5020:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "E411CEEF-8615-47B3-AC1F-F907ECD8C725",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:canon:imagerunner_6870:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "86B994ED-E476-43EE-BD7D-FA3158AA66F8",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:canon:imagerunner_8500:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "FC5C108F-F89B-457D-9EDA-A5096AA01363",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:canon:imagerunner_9070:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "3C40ED96-C1D9-4C2F-B90A-BEF0B36BAF17",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:canon:imagerunner_c3200:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "714DD889-AFDB-4300-9A72-F46A6263733C",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:canon:imagerunner_c3220:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "66DACE20-FDA4-4633-9755-95F72257F6CF",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:canon:imagerunner_c6800:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "E1542430-BAEB-4A4E-B617-AFC303614E0C",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ]
          }
        ],
        "cveTags": [],
        "descriptions": [
          {
            "lang": "en",
            "value": "The FTP print feature in multiple Canon printers, including imageRUNNER and imagePRESS, allow remote attackers to use the server as an inadvertent proxy via a modified PORT command, aka FTP bounce."
          },
          {
            "lang": "es",
            "value": "La caracter\u00edstica de impresi\u00f3n FTP en m\u00faltiples impresoras Canon, incluyendo imageRUNNER e imagePRESS, permite a atacantes remotos utilizar el servidor como un proxy inadvertido a trav\u00e9s de un comando PORT modificado, tambi\u00e9n conocido como salto FTP."
          }
        ],
        "id": "CVE-2008-0303",
        "lastModified": "2026-04-23T00:35:47.467",
        "metrics": {
          "cvssMetricV2": [
            {
              "acInsufInfo": false,
              "baseSeverity": "MEDIUM",
              "cvssData": {
                "accessComplexity": "LOW",
                "accessVector": "NETWORK",
                "authentication": "NONE",
                "availabilityImpact": "PARTIAL",
                "baseScore": 6.4,
                "confidentialityImpact": "NONE",
                "integrityImpact": "PARTIAL",
                "vectorString": "AV:N/AC:L/Au:N/C:N/I:P/A:P",
                "version": "2.0"
              },
              "exploitabilityScore": 10.0,
              "impactScore": 4.9,
              "obtainAllPrivilege": false,
              "obtainOtherPrivilege": false,
              "obtainUserPrivilege": false,
              "source": "nvd@nist.gov",
              "type": "Primary",
              "userInteractionRequired": false
            }
          ]
        },
        "published": "2008-02-29T02:44:00.000",
        "references": [
          {
            "source": "cve@mitre.org",
            "url": "http://itso.iu.edu/20080229_Canon_MFD_FTP_bounce_attack"
          },
          {
            "source": "cve@mitre.org",
            "url": "http://jvn.jp/en/jp/JVN10056705/index.html"
          },
          {
            "source": "cve@mitre.org",
            "url": "http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-000013.html"
          },
          {
            "source": "cve@mitre.org",
            "url": "http://securitytracker.com/id?1019528"
          },
          {
            "source": "cve@mitre.org",
            "tags": [
              "US Government Resource"
            ],
            "url": "http://www.kb.cert.org/vuls/id/568073"
          },
          {
            "source": "cve@mitre.org",
            "url": "http://www.securityfocus.com/bid/28042"
          },
          {
            "source": "cve@mitre.org",
            "url": "http://www.usa.canon.com/html/security/pdf/CVA-001.pdf"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://itso.iu.edu/20080229_Canon_MFD_FTP_bounce_attack"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://jvn.jp/en/jp/JVN10056705/index.html"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-000013.html"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://securitytracker.com/id?1019528"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "tags": [
              "US Government Resource"
            ],
            "url": "http://www.kb.cert.org/vuls/id/568073"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://www.securityfocus.com/bid/28042"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://www.usa.canon.com/html/security/pdf/CVA-001.pdf"
          }
        ],
        "sourceIdentifier": "cve@mitre.org",
        "vulnStatus": "Modified",
        "weaknesses": [
          {
            "description": [
              {
                "lang": "en",
                "value": "NVD-CWE-Other"
              }
            ],
            "source": "nvd@nist.gov",
            "type": "Primary"
          }
        ]
      }
    }
  }
}

FKIE_CVE-2008-0303

Vulnerability from fkie_nvd - Published: 2008-02-29 02:44 - Updated: 2026-06-16 22:49

Severity

Summary

The FTP print feature in multiple Canon printers, including imageRUNNER and imagePRESS, allow remote attackers to use the server as an inadvertent proxy via a modified PORT command, aka FTP bounce.

References

URL	Tags
cve@mitre.org	http://itso.iu.edu/20080229_Canon_MFD_FTP_bounce_attack
cve@mitre.org	http://jvn.jp/en/jp/JVN10056705/index.html
cve@mitre.org	http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-000013.html
cve@mitre.org	http://securitytracker.com/id?1019528
cve@mitre.org	http://www.kb.cert.org/vuls/id/568073	US Government Resource
cve@mitre.org	http://www.securityfocus.com/bid/28042
cve@mitre.org	http://www.usa.canon.com/html/security/pdf/CVA-001.pdf
af854a3a-2127-422b-91ae-364da2661108	http://itso.iu.edu/20080229_Canon_MFD_FTP_bounce_attack
af854a3a-2127-422b-91ae-364da2661108	http://jvn.jp/en/jp/JVN10056705/index.html
af854a3a-2127-422b-91ae-364da2661108	http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-000013.html
af854a3a-2127-422b-91ae-364da2661108	http://securitytracker.com/id?1019528
af854a3a-2127-422b-91ae-364da2661108	http://www.kb.cert.org/vuls/id/568073	US Government Resource
af854a3a-2127-422b-91ae-364da2661108	http://www.securityfocus.com/bid/28042
af854a3a-2127-422b-91ae-364da2661108	http://www.usa.canon.com/html/security/pdf/CVA-001.pdf

Impacted products

Vendor	Product	Version
canon	i-sensys	lbp3360
canon	i-sensys	lbp3460
canon	i-sensys	lbp5360
canon	imagepress	c1
canon	imagerunner	85plus
canon	imagerunner	105plus
canon	imagerunner	2230
canon	imagerunner	2270
canon	imagerunner	2570c
canon	imagerunner	2570ci
canon	imagerunner	2870
canon	imagerunner	3025
canon	imagerunner	3025n
canon	imagerunner	3035
canon	imagerunner	3035n
canon	imagerunner	3045
canon	imagerunner	3045n
canon	imagerunner	3170c
canon	imagerunner	3170ci
canon	imagerunner	3180c
canon	imagerunner	3180ci
canon	imagerunner	3530
canon	imagerunner	3570
canon	imagerunner	4570
canon	imagerunner	5055
canon	imagerunner	5055n
canon	imagerunner	5065
canon	imagerunner	5065n
canon	imagerunner	5075
canon	imagerunner	5075n
canon	imagerunner	5570
canon	imagerunner	5800c
canon	imagerunner	5800cn
canon	imagerunner	6570
canon	imagerunner	6800c
canon	imagerunner	6800cn
canon	imagerunner	7086
canon	imagerunner	7095
canon	imagerunner	7095p
canon	imagerunner	7105
canon	imagerunner	8070
canon	imagerunner	c2380i
canon	imagerunner	c2620
canon	imagerunner	c2620n
canon	imagerunner	c2880
canon	imagerunner	c2880i
canon	imagerunner	c3220n
canon	imagerunner	c3380
canon	imagerunner	c3380i
canon	imagerunner	c4080i
canon	imagerunner	c4580i
canon	imagerunner	c5185i
canon	imagerunner	c5870
canon	imagerunner	c5870i
canon	imagerunner	c5880
canon	imagerunner	c5880i
canon	imagerunner	c6870i
canon	imagerunner	c6880
canon	imagerunner	c6880i
canon	imagerunner	clc4040
canon	imagerunner	clc5151
canon	imagerunner_2620	*
canon	imagerunner_5000i	*
canon	imagerunner_5020	*
canon	imagerunner_6870	*
canon	imagerunner_8500	*
canon	imagerunner_9070	*
canon	imagerunner_c3200	*
canon	imagerunner_c3220	*
canon	imagerunner_c6800	*

JSON

To clipboard

{
  "affected": [
    {
      "affectedData": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "source": "cve@mitre.org"
    }
  ],
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:canon:i-sensys:lbp3360:*:*:*:*:*:*:*",
              "matchCriteriaId": "6D5527A3-316B-4C5C-9499-E90A9B3ED521",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:canon:i-sensys:lbp3460:*:*:*:*:*:*:*",
              "matchCriteriaId": "ACAFBF89-8C4D-4F18-BDB8-F7E5D5E18658",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:canon:i-sensys:lbp5360:*:*:*:*:*:*:*",
              "matchCriteriaId": "D090A27B-BDEF-45CB-ADDD-02C787401682",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:canon:imagepress:c1:*:*:*:*:*:*:*",
              "matchCriteriaId": "7A8A809D-AE44-439B-850A-A4C282E2879D",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:canon:imagerunner:85plus:*:*:*:*:*:*:*",
              "matchCriteriaId": "956D38C1-63EB-484A-86E1-8FFFBB4F2687",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:canon:imagerunner:105plus:*:*:*:*:*:*:*",
              "matchCriteriaId": "92429901-A557-4CCD-9014-1EA32D1D738C",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:canon:imagerunner:2230:*:*:*:*:*:*:*",
              "matchCriteriaId": "38E229C8-C530-4EF1-8582-E50000DDC676",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:canon:imagerunner:2270:*:*:*:*:*:*:*",
              "matchCriteriaId": "05045F4F-C2BD-4215-AB82-060A9C8E5C0E",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:canon:imagerunner:2570c:*:*:*:*:*:*:*",
              "matchCriteriaId": "47F18BD2-8628-4D74-AB71-1F07C45AA865",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:canon:imagerunner:2570ci:*:*:*:*:*:*:*",
              "matchCriteriaId": "A2191AA9-6EAD-401E-A831-7EAFF1D1AE4C",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:canon:imagerunner:2870:*:*:*:*:*:*:*",
              "matchCriteriaId": "AB25A914-5F7D-4134-B8D3-9FEE77D1E004",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:canon:imagerunner:3025:*:*:*:*:*:*:*",
              "matchCriteriaId": "CBBB4571-76C9-44D6-85BF-A3A4EAEF30A8",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:canon:imagerunner:3025n:*:*:*:*:*:*:*",
              "matchCriteriaId": "1EB2555A-4596-4502-9F3D-1C863A49A7C4",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:canon:imagerunner:3035:*:*:*:*:*:*:*",
              "matchCriteriaId": "7D230D14-2B2D-4005-A613-45AC1BCE881F",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:canon:imagerunner:3035n:*:*:*:*:*:*:*",
              "matchCriteriaId": "3C8E5E7F-2A49-4EE1-8AF3-7A10D35A0C7A",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:canon:imagerunner:3045:*:*:*:*:*:*:*",
              "matchCriteriaId": "BB5F8120-3BB9-4922-A210-3EC2DE905824",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:canon:imagerunner:3045n:*:*:*:*:*:*:*",
              "matchCriteriaId": "98C7BF9D-12DD-48AF-8CA2-F7FBE975827B",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:canon:imagerunner:3170c:*:*:*:*:*:*:*",
              "matchCriteriaId": "522C81B2-8565-42B0-986A-AA529B68CE73",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:canon:imagerunner:3170ci:*:*:*:*:*:*:*",
              "matchCriteriaId": "3D2BED79-2917-43D3-9B8F-AFE6103B780D",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:canon:imagerunner:3180c:*:*:*:*:*:*:*",
              "matchCriteriaId": "FFAE5078-589D-4B69-BB89-0F639B63A617",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:canon:imagerunner:3180ci:*:*:*:*:*:*:*",
              "matchCriteriaId": "52D2110B-56A3-4288-A81D-C9EB43602AE6",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:canon:imagerunner:3530:*:*:*:*:*:*:*",
              "matchCriteriaId": "83390EF6-E058-48C2-89C0-B05973017958",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:canon:imagerunner:3570:*:*:*:*:*:*:*",
              "matchCriteriaId": "D6B4AA49-EF73-44B9-BF36-7ACA3AF83865",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:canon:imagerunner:4570:*:*:*:*:*:*:*",
              "matchCriteriaId": "51C2944E-3FBC-465F-A2B5-35051F0531CC",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:canon:imagerunner:5055:*:*:*:*:*:*:*",
              "matchCriteriaId": "D2E74C0F-E5DC-446A-AB63-47EC0A733E7C",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:canon:imagerunner:5055n:*:*:*:*:*:*:*",
              "matchCriteriaId": "B10EB3DD-F392-46E0-ADC0-10DA2AF44731",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:canon:imagerunner:5065:*:*:*:*:*:*:*",
              "matchCriteriaId": "1AAE2C40-18E7-4BA5-B121-2363D973257B",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:canon:imagerunner:5065n:*:*:*:*:*:*:*",
              "matchCriteriaId": "FFCFF25F-5974-40D0-916D-065A5899647B",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:canon:imagerunner:5075:*:*:*:*:*:*:*",
              "matchCriteriaId": "040BE6F9-5F1C-4E4C-825D-3F9EB35A7D6A",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:canon:imagerunner:5075n:*:*:*:*:*:*:*",
              "matchCriteriaId": "FF5B10EF-4DEF-4B82-A3E2-ABABCEC4FA9A",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:canon:imagerunner:5570:*:*:*:*:*:*:*",
              "matchCriteriaId": "FB74285C-E11C-490A-970A-39B467AA9AF0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:canon:imagerunner:5800c:*:*:*:*:*:*:*",
              "matchCriteriaId": "D4F0C391-0A24-4A71-B700-AC7968B18B96",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:canon:imagerunner:5800cn:*:*:*:*:*:*:*",
              "matchCriteriaId": "00810DAE-7457-4FBF-95C9-E1AF355D7C9C",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:canon:imagerunner:6570:*:*:*:*:*:*:*",
              "matchCriteriaId": "9A409632-8511-4EC0-BB5F-743C9A14CBFB",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:canon:imagerunner:6800c:*:*:*:*:*:*:*",
              "matchCriteriaId": "C116560B-00B6-4BCF-9349-EE345D07E0EA",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:canon:imagerunner:6800cn:*:*:*:*:*:*:*",
              "matchCriteriaId": "A2EC135D-87E6-40EE-A699-B7501ADF5D9E",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:canon:imagerunner:7086:*:*:*:*:*:*:*",
              "matchCriteriaId": "17866E3B-F0AB-4776-8337-7F297613A766",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:canon:imagerunner:7095:*:*:*:*:*:*:*",
              "matchCriteriaId": "C15C1554-F055-457F-B1EB-99214798BD92",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:canon:imagerunner:7095p:*:*:*:*:*:*:*",
              "matchCriteriaId": "CEE290B3-F248-4F79-B971-6658845E531F",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:canon:imagerunner:7105:*:*:*:*:*:*:*",
              "matchCriteriaId": "786EC60E-A890-4236-AEC4-1815CBE36404",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:canon:imagerunner:8070:*:*:*:*:*:*:*",
              "matchCriteriaId": "10B23884-6B28-4E91-9207-C0B43A8911BF",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:canon:imagerunner:c2380i:*:*:*:*:*:*:*",
              "matchCriteriaId": "0FBAD1AD-E705-4BB1-B308-C33B4F4FBF7D",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:canon:imagerunner:c2620:*:*:*:*:*:*:*",
              "matchCriteriaId": "6A3547DD-7C0B-4ED6-B361-25FD0D0C0FDC",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:canon:imagerunner:c2620n:*:*:*:*:*:*:*",
              "matchCriteriaId": "4B8527DA-E3A3-4CBD-AD8D-643314BFA0DD",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:canon:imagerunner:c2880:*:*:*:*:*:*:*",
              "matchCriteriaId": "1D82E498-D467-42E7-B82B-DB970A8584F2",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:canon:imagerunner:c2880i:*:*:*:*:*:*:*",
              "matchCriteriaId": "6DCF3699-B5FA-4E48-8C95-20FA7ADA6EAF",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:canon:imagerunner:c3220n:*:*:*:*:*:*:*",
              "matchCriteriaId": "AC02E198-284C-45BE-8CB2-0AE1BED06FFA",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:canon:imagerunner:c3380:*:*:*:*:*:*:*",
              "matchCriteriaId": "3194031C-A77E-4DB1-8AA1-394D9D0069F0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:canon:imagerunner:c3380i:*:*:*:*:*:*:*",
              "matchCriteriaId": "F9795579-0C94-4704-94B6-419390055B89",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:canon:imagerunner:c4080i:*:*:*:*:*:*:*",
              "matchCriteriaId": "C13F455D-7C30-45D3-8987-5EFD05930679",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:canon:imagerunner:c4580i:*:*:*:*:*:*:*",
              "matchCriteriaId": "0BDB208C-9DFD-41D2-8563-6637958938F4",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:canon:imagerunner:c5185i:*:*:*:*:*:*:*",
              "matchCriteriaId": "5EB8CBCB-7C3D-4D7F-92A9-07EE65D44864",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:canon:imagerunner:c5870:*:*:*:*:*:*:*",
              "matchCriteriaId": "8944BA6B-1CE1-4548-BF12-AA00972869BB",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:canon:imagerunner:c5870i:*:*:*:*:*:*:*",
              "matchCriteriaId": "311E74FA-8C6E-4186-95CB-57579796BF4A",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:canon:imagerunner:c5880:*:*:*:*:*:*:*",
              "matchCriteriaId": "8DBD69F8-B40C-4189-93D4-6A7E611B31B0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:canon:imagerunner:c5880i:*:*:*:*:*:*:*",
              "matchCriteriaId": "1E5E4B7A-F8CB-4D01-BFF1-E2F2B4B680C7",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:canon:imagerunner:c6870i:*:*:*:*:*:*:*",
              "matchCriteriaId": "B5D65FD6-90A3-4048-973D-1D6404B1CA57",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:canon:imagerunner:c6880:*:*:*:*:*:*:*",
              "matchCriteriaId": "3415DF9C-CE4A-499E-A032-D0C66AA0E37E",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:canon:imagerunner:c6880i:*:*:*:*:*:*:*",
              "matchCriteriaId": "3CD97A28-761D-482F-8A3C-1BE80B356E84",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:canon:imagerunner:clc4040:*:*:*:*:*:*:*",
              "matchCriteriaId": "9CE907E6-6033-429D-948C-F0C67CFB39A3",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:canon:imagerunner:clc5151:*:*:*:*:*:*:*",
              "matchCriteriaId": "ACE2BDF2-D17A-4ABB-82A3-F0B94064824D",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:canon:imagerunner_2620:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "3E4C7D11-EE90-4E10-9BBB-9CDC55467A2B",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:canon:imagerunner_5000i:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "83EB4A89-5470-4B7E-B09D-3CC1D7CC7F4E",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:canon:imagerunner_5020:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "E411CEEF-8615-47B3-AC1F-F907ECD8C725",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:canon:imagerunner_6870:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "86B994ED-E476-43EE-BD7D-FA3158AA66F8",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:canon:imagerunner_8500:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "FC5C108F-F89B-457D-9EDA-A5096AA01363",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:canon:imagerunner_9070:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "3C40ED96-C1D9-4C2F-B90A-BEF0B36BAF17",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:canon:imagerunner_c3200:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "714DD889-AFDB-4300-9A72-F46A6263733C",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:canon:imagerunner_c3220:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "66DACE20-FDA4-4633-9755-95F72257F6CF",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:canon:imagerunner_c6800:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "E1542430-BAEB-4A4E-B617-AFC303614E0C",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "The FTP print feature in multiple Canon printers, including imageRUNNER and imagePRESS, allow remote attackers to use the server as an inadvertent proxy via a modified PORT command, aka FTP bounce."
    },
    {
      "lang": "es",
      "value": "La caracter\u00edstica de impresi\u00f3n FTP en m\u00faltiples impresoras Canon, incluyendo imageRUNNER e imagePRESS, permite a atacantes remotos utilizar el servidor como un proxy inadvertido a trav\u00e9s de un comando PORT modificado, tambi\u00e9n conocido como salto FTP."
    }
  ],
  "id": "CVE-2008-0303",
  "lastModified": "2026-06-16T22:49:21.260",
  "metrics": {
    "cvssMetricV2": [
      {
        "acInsufInfo": false,
        "baseSeverity": "MEDIUM",
        "cvssData": {
          "accessComplexity": "LOW",
          "accessVector": "NETWORK",
          "authentication": "NONE",
          "availabilityImpact": "PARTIAL",
          "baseScore": 6.4,
          "confidentialityImpact": "NONE",
          "integrityImpact": "PARTIAL",
          "vectorString": "AV:N/AC:L/Au:N/C:N/I:P/A:P",
          "version": "2.0"
        },
        "exploitabilityScore": 10.0,
        "impactScore": 4.9,
        "obtainAllPrivilege": false,
        "obtainOtherPrivilege": false,
        "obtainUserPrivilege": false,
        "source": "nvd@nist.gov",
        "type": "Primary",
        "userInteractionRequired": false
      }
    ]
  },
  "published": "2008-02-29T02:44:00.000",
  "references": [
    {
      "source": "cve@mitre.org",
      "url": "http://itso.iu.edu/20080229_Canon_MFD_FTP_bounce_attack"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://jvn.jp/en/jp/JVN10056705/index.html"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-000013.html"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://securitytracker.com/id?1019528"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "US Government Resource"
      ],
      "url": "http://www.kb.cert.org/vuls/id/568073"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.securityfocus.com/bid/28042"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.usa.canon.com/html/security/pdf/CVA-001.pdf"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://itso.iu.edu/20080229_Canon_MFD_FTP_bounce_attack"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://jvn.jp/en/jp/JVN10056705/index.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-000013.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://securitytracker.com/id?1019528"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "US Government Resource"
      ],
      "url": "http://www.kb.cert.org/vuls/id/568073"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.securityfocus.com/bid/28042"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.usa.canon.com/html/security/pdf/CVA-001.pdf"
    }
  ],
  "sourceIdentifier": "cve@mitre.org",
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-Other"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}

GHSA-4P8P-HWVP-PQ97

Vulnerability from github – Published: 2022-05-01 23:28 – Updated: 2022-05-01 23:28

Details

The FTP print feature in multiple Canon printers, including imageRUNNER and imagePRESS, allow remote attackers to use the server as an inadvertent proxy via a modified PORT command, aka FTP bounce.

Show details on source website

JSON

To clipboard

{
  "affected": [],
  "aliases": [
    "CVE-2008-0303"
  ],
  "database_specific": {
    "cwe_ids": [],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2008-02-29T02:44:00Z",
    "severity": "MODERATE"
  },
  "details": "The FTP print feature in multiple Canon printers, including imageRUNNER and imagePRESS, allow remote attackers to use the server as an inadvertent proxy via a modified PORT command, aka FTP bounce.",
  "id": "GHSA-4p8p-hwvp-pq97",
  "modified": "2022-05-01T23:28:57Z",
  "published": "2022-05-01T23:28:57Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2008-0303"
    },
    {
      "type": "WEB",
      "url": "http://itso.iu.edu/20080229_Canon_MFD_FTP_bounce_attack"
    },
    {
      "type": "WEB",
      "url": "http://jvn.jp/en/jp/JVN10056705/index.html"
    },
    {
      "type": "WEB",
      "url": "http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-000013.html"
    },
    {
      "type": "WEB",
      "url": "http://securitytracker.com/id?1019528"
    },
    {
      "type": "WEB",
      "url": "http://www.kb.cert.org/vuls/id/568073"
    },
    {
      "type": "WEB",
      "url": "http://www.securityfocus.com/bid/28042"
    },
    {
      "type": "WEB",
      "url": "http://www.usa.canon.com/html/security/pdf/CVA-001.pdf"
    }
  ],
  "schema_version": "1.4.0",
  "severity": []
}

GSD-2008-0303

Vulnerability from gsd - Updated: 2023-12-13 01:22

Details

The FTP print feature in multiple Canon printers, including imageRUNNER and imagePRESS, allow remote attackers to use the server as an inadvertent proxy via a modified PORT command, aka FTP bounce.

Aliases

CVE-2008-0303

Aliases

CVE-2008-0303

JSON

To clipboard

{
  "GSD": {
    "alias": "CVE-2008-0303",
    "description": "The FTP print feature in multiple Canon printers, including imageRUNNER and imagePRESS, allow remote attackers to use the server as an inadvertent proxy via a modified PORT command, aka FTP bounce.",
    "id": "GSD-2008-0303"
  },
  "gsd": {
    "metadata": {
      "exploitCode": "unknown",
      "remediation": "unknown",
      "reportConfidence": "confirmed",
      "type": "vulnerability"
    },
    "osvSchema": {
      "aliases": [
        "CVE-2008-0303"
      ],
      "details": "The FTP print feature in multiple Canon printers, including imageRUNNER and imagePRESS, allow remote attackers to use the server as an inadvertent proxy via a modified PORT command, aka FTP bounce.",
      "id": "GSD-2008-0303",
      "modified": "2023-12-13T01:22:59.036886Z",
      "schema_version": "1.4.0"
    }
  },
  "namespaces": {
    "cve.org": {
      "CVE_data_meta": {
        "ASSIGNER": "cve@mitre.org",
        "ID": "CVE-2008-0303",
        "STATE": "PUBLIC"
      },
      "affects": {
        "vendor": {
          "vendor_data": [
            {
              "product": {
                "product_data": [
                  {
                    "product_name": "n/a",
                    "version": {
                      "version_data": [
                        {
                          "version_value": "n/a"
                        }
                      ]
                    }
                  }
                ]
              },
              "vendor_name": "n/a"
            }
          ]
        }
      },
      "data_format": "MITRE",
      "data_type": "CVE",
      "data_version": "4.0",
      "description": {
        "description_data": [
          {
            "lang": "eng",
            "value": "The FTP print feature in multiple Canon printers, including imageRUNNER and imagePRESS, allow remote attackers to use the server as an inadvertent proxy via a modified PORT command, aka FTP bounce."
          }
        ]
      },
      "problemtype": {
        "problemtype_data": [
          {
            "description": [
              {
                "lang": "eng",
                "value": "n/a"
              }
            ]
          }
        ]
      },
      "references": {
        "reference_data": [
          {
            "name": "VU#568073",
            "refsource": "CERT-VN",
            "url": "http://www.kb.cert.org/vuls/id/568073"
          },
          {
            "name": "28042",
            "refsource": "BID",
            "url": "http://www.securityfocus.com/bid/28042"
          },
          {
            "name": "JVN#10056705",
            "refsource": "JVN",
            "url": "http://jvn.jp/en/jp/JVN10056705/index.html"
          },
          {
            "name": "http://itso.iu.edu/20080229_Canon_MFD_FTP_bounce_attack",
            "refsource": "MISC",
            "url": "http://itso.iu.edu/20080229_Canon_MFD_FTP_bounce_attack"
          },
          {
            "name": "1019528",
            "refsource": "SECTRACK",
            "url": "http://securitytracker.com/id?1019528"
          },
          {
            "name": "http://www.usa.canon.com/html/security/pdf/CVA-001.pdf",
            "refsource": "CONFIRM",
            "url": "http://www.usa.canon.com/html/security/pdf/CVA-001.pdf"
          },
          {
            "name": "JVNDB-2008-000013",
            "refsource": "JVNDB",
            "url": "http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-000013.html"
          }
        ]
      }
    },
    "nvd.nist.gov": {
      "configurations": {
        "CVE_data_version": "4.0",
        "nodes": [
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:a:canon:imagerunner:2230:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:canon:imagerunner:2270:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:canon:imagerunner:3035n:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:canon:imagerunner:3045:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:canon:imagerunner:4570:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:canon:imagerunner:5055:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:canon:imagerunner:5800c:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:canon:imagerunner:5800cn:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:canon:imagerunner:7105:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:canon:imagerunner:8070:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:canon:imagerunner:c3380:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:canon:imagerunner:c3380i:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:canon:imagerunner:c5880i:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:canon:imagerunner:c6870i:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:canon:imagerunner_5020:*:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:canon:imagerunner_6870:*:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:canon:imagerunner_8500:*:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:canon:i-sensys:lbp3360:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:canon:imagerunner:2570c:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:canon:imagerunner:2570ci:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:canon:imagerunner:3045n:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:canon:imagerunner:3170c:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:canon:imagerunner:3170ci:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:canon:imagerunner:5055n:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:canon:imagerunner:5065:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:canon:imagerunner:6570:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:canon:imagerunner:6800c:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:canon:imagerunner:85plus:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:canon:imagerunner:c2380i:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:canon:imagerunner:c2620:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:canon:imagerunner:c4080i:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:canon:imagerunner:c4580i:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:canon:imagerunner:c6880:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:canon:imagerunner:c6880i:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:canon:imagerunner_9070:*:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:canon:imagerunner_c3200:*:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:canon:i-sensys:lbp3460:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:canon:i-sensys:lbp5360:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:canon:imagerunner:2870:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:canon:imagerunner:3025:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:canon:imagerunner:3180c:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:canon:imagerunner:3180ci:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:canon:imagerunner:5065n:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:canon:imagerunner:5075:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:canon:imagerunner:6800cn:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:canon:imagerunner:7086:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:canon:imagerunner:c2620n:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:canon:imagerunner:c2880:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:canon:imagerunner:c5185i:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:canon:imagerunner:c5870:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:canon:imagerunner:clc4040:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:canon:imagerunner:clc5151:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:canon:imagerunner_c3220:*:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:canon:imagerunner_c6800:*:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:canon:imagepress:c1:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:canon:imagerunner:105plus:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:canon:imagerunner:3025n:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:canon:imagerunner:3035:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:canon:imagerunner:3530:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:canon:imagerunner:3570:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:canon:imagerunner:5075n:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:canon:imagerunner:5570:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:canon:imagerunner:7095:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:canon:imagerunner:7095p:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:canon:imagerunner:c2880i:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:canon:imagerunner:c3220n:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:canon:imagerunner:c5870i:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:canon:imagerunner:c5880:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:canon:imagerunner_2620:*:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:canon:imagerunner_5000i:*:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              }
            ],
            "operator": "OR"
          }
        ]
      },
      "cve": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2008-0303"
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "en",
              "value": "The FTP print feature in multiple Canon printers, including imageRUNNER and imagePRESS, allow remote attackers to use the server as an inadvertent proxy via a modified PORT command, aka FTP bounce."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "en",
                  "value": "NVD-CWE-Other"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "http://itso.iu.edu/20080229_Canon_MFD_FTP_bounce_attack",
              "refsource": "MISC",
              "tags": [],
              "url": "http://itso.iu.edu/20080229_Canon_MFD_FTP_bounce_attack"
            },
            {
              "name": "http://www.usa.canon.com/html/security/pdf/CVA-001.pdf",
              "refsource": "CONFIRM",
              "tags": [],
              "url": "http://www.usa.canon.com/html/security/pdf/CVA-001.pdf"
            },
            {
              "name": "VU#568073",
              "refsource": "CERT-VN",
              "tags": [
                "US Government Resource"
              ],
              "url": "http://www.kb.cert.org/vuls/id/568073"
            },
            {
              "name": "28042",
              "refsource": "BID",
              "tags": [],
              "url": "http://www.securityfocus.com/bid/28042"
            },
            {
              "name": "1019528",
              "refsource": "SECTRACK",
              "tags": [],
              "url": "http://securitytracker.com/id?1019528"
            },
            {
              "name": "JVNDB-2008-000013",
              "refsource": "JVNDB",
              "tags": [],
              "url": "http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-000013.html"
            },
            {
              "name": "JVN#10056705",
              "refsource": "JVN",
              "tags": [],
              "url": "http://jvn.jp/en/jp/JVN10056705/index.html"
            }
          ]
        }
      },
      "impact": {
        "baseMetricV2": {
          "cvssV2": {
            "accessComplexity": "LOW",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 6.4,
            "confidentialityImpact": "NONE",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:N/AC:L/Au:N/C:N/I:P/A:P",
            "version": "2.0"
          },
          "exploitabilityScore": 10.0,
          "impactScore": 4.9,
          "obtainAllPrivilege": false,
          "obtainOtherPrivilege": false,
          "obtainUserPrivilege": false,
          "severity": "MEDIUM",
          "userInteractionRequired": false
        }
      },
      "lastModifiedDate": "2009-03-13T05:31Z",
      "publishedDate": "2008-02-29T02:44Z"
    }
  }
}

JVNDB-2008-000013

Vulnerability from jvndb - Published: 2008-05-20 15:00 - Updated:2008-05-21 02:31

Severity

N/A (UNKNOWN) - -

Summary

FTP bounce vulnerability in multiple Canon digital multifunction copiers and laser beam printers

Details

Multiple Canon digital multifunction copiers and laser beam printers contain a vulnerability that could allow a remote attacker to access other network devices via a built-in FTP server. The Canon Color imageRUNNER Series, imageRUNNER Series, imagePRESS Series, and laser beam printer series are digital multifunction copiers and printers. Some of these products contain a vulnerability that could allow a remote attacker to access other network devices via a built-in FTP server.

References

Type

URL

	JVN	http://jvn.jp/en/jp/JVN10056705/index.html
	CVE	http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-0303
	NVD	http://nvd.nist.gov/nvd.cfm?cvename=CVE-2008-0303
	CERT-VN	http://www.kb.cert.org/vuls/id/568073
	BID	http://www.securityfocus.com/bid/28042
	SECTRACK	http://securitytracker.com/id?1019528
	No Mapping(CWE-DesignError)	https://www.ipa.go.jp/en/security/vulnerabilities/cwe.html

Impacted products

Vendor

Product

Canon Inc.

imageRUNNER

Show details on JVN DB website

JSON

To clipboard

{
  "@rdf:about": "https://jvndb.jvn.jp/en/contents/2008/JVNDB-2008-000013.html",
  "dc:date": "2008-05-21T11:31+09:00",
  "dcterms:issued": "2008-05-21T00:00+09:00",
  "dcterms:modified": "2008-05-21T11:31+09:00",
  "description": "Multiple Canon digital multifunction copiers and laser beam printers contain a vulnerability that could allow a remote attacker to access other network devices via a built-in FTP server.\r\n\r\nThe Canon Color imageRUNNER Series, imageRUNNER Series, imagePRESS Series, and laser beam printer series are digital multifunction copiers and printers. Some of these products contain a vulnerability that could allow a remote attacker to access other network devices via a built-in FTP server.",
  "link": "https://jvndb.jvn.jp/en/contents/2008/JVNDB-2008-000013.html",
  "sec:cpe": {
    "#text": "cpe:/a:canon:imagerunner",
    "@product": "imageRUNNER",
    "@vendor": "Canon Inc.",
    "@version": "2.2"
  },
  "sec:cvss": {
    "@score": "5.0",
    "@severity": "Medium",
    "@type": "Base",
    "@vector": "AV:N/AC:L/Au:N/C:N/I:P/A:N",
    "@version": "2.0"
  },
  "sec:identifier": "JVNDB-2008-000013",
  "sec:references": [
    {
      "#text": "http://jvn.jp/en/jp/JVN10056705/index.html",
      "@id": "JVN#10056705",
      "@source": "JVN"
    },
    {
      "#text": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-0303",
      "@id": "CVE-2008-0303",
      "@source": "CVE"
    },
    {
      "#text": "http://nvd.nist.gov/nvd.cfm?cvename=CVE-2008-0303",
      "@id": "CVE-2008-0303",
      "@source": "NVD"
    },
    {
      "#text": "http://www.kb.cert.org/vuls/id/568073",
      "@id": "VU#568073",
      "@source": "CERT-VN"
    },
    {
      "#text": "http://www.securityfocus.com/bid/28042",
      "@id": "28042",
      "@source": "BID"
    },
    {
      "#text": "http://securitytracker.com/id?1019528",
      "@id": "1019528",
      "@source": "SECTRACK"
    },
    {
      "#text": "https://www.ipa.go.jp/en/security/vulnerabilities/cwe.html",
      "@id": "CWE-DesignError",
      "@title": "No Mapping(CWE-DesignError)"
    }
  ],
  "title": "FTP bounce vulnerability in multiple Canon digital multifunction copiers and laser beam printers"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

CVE-2008-0303 (GCVE-0-2008-0303)

FKIE_CVE-2008-0303

GHSA-4P8P-HWVP-PQ97

GSD-2008-0303

JVNDB-2008-000013

Tags

Sightings

Nomenclature

Related by attack behaviour