Canon ImageRunner Information Disclosure Vulnerability

Bugtraq ID:	19865
Class:	Access Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Sep 05 2006 12:00AM
Updated:	Sep 28 2006 08:30PM
Credit:	Discovery of this issue is credited to [email protected].
Vulnerable:	Canon imageRUNNER C6870 Canon imageRUNNER C6800 Canon imageRUNNER C3220 Canon imageRUNNER 9070 Canon imageRUNNER 8500 Canon imageRUNNER 5020 Canon imageRUNNER 4570
Not Vulnerable:

Canon ImageRunner Information Disclosure Vulnerability

The Canon ImageRunner multi-function device is a network-based printer and photocopier designed to facilitate all the printing requirements of small offices.

Canon ImageRunner is reportedly prone to an information-disclosure vulnerability because the remote UI web interface exposes cleartext username and password entries when exporting address book entries.

An attacker may leverage this issue to access confidential username and password information and to launch other attacks.

Canon ImageRunner Information Disclosure Vulnerability

Attackers can exploit this issue via a web client.

Canon ImageRunner Information Disclosure Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected]:[email protected].

Canon ImageRunner Information Disclosure Vulnerability

References:

• Canon Homepage (Canon)
  
• Canon ImageRunner reveals SMB, IPX, and FTP username/passwords ([email protected])