Kyocera Mita Scanner File Utility Multiple Remote Vulnerabilities
BID:36405
Info
Kyocera Mita Scanner File Utility Multiple Remote Vulnerabilities
| Bugtraq ID: | 36405 |
| Class: | Unknown |
| CVE: |
CVE-2008-7113 CVE-2008-7112 CVE-2008-7111 |
| Remote: | Yes |
| Local: | No |
| Published: | Aug 15 2008 12:00AM |
| Updated: | Sep 15 2009 11:51PM |
| Credit: | Seth Fogie of White Wolf Labs |
| Vulnerable: |
Kyocera Mita Scanner File Utility 3.3.0.1 |
| Not Vulnerable: | |
Discussion
Kyocera Mita Scanner File Utility Multiple Remote Vulnerabilities
Kyocera Mita Scanner File Utility is prone to the following remote vulnerabilities:
- an access-validation vulnerability
- an arbitrary-file-upload vulnerability
- multiple remote denial-of-service vulnerabilities
Attackers can exploit these issues to obtain sensitive information, bypass access control restrictions, upload malicious files to vulnerable computers, or create denial-of-service conditions. Other attacks are also possible.
Kyocera Mita Scanner File Utility 3.3.0.1 is vulnerable; other versions may also be affected.
Kyocera Mita Scanner File Utility is prone to the following remote vulnerabilities:
- an access-validation vulnerability
- an arbitrary-file-upload vulnerability
- multiple remote denial-of-service vulnerabilities
Attackers can exploit these issues to obtain sensitive information, bypass access control restrictions, upload malicious files to vulnerable computers, or create denial-of-service conditions. Other attacks are also possible.
Kyocera Mita Scanner File Utility 3.3.0.1 is vulnerable; other versions may also be affected.
Exploit / POC
Kyocera Mita Scanner File Utility Multiple Remote Vulnerabilities
To exploit some of these issues, attackers may use readily available tools.
To exploit some of these issues, attackers may use readily available tools.
Solution / Fix
Kyocera Mita Scanner File Utility Multiple Remote Vulnerabilities
Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
References
Kyocera Mita Scanner File Utility Multiple Remote Vulnerabilities
References:
References:
- Exploiting Scan to PC/Desktop Applications (Seth Fogie)
- Security Analysis of a Scan to Desktop/PC Solution (Seth Fogie)
- Vendor Homepage (Kyocera)
- White Wolf Labs #080826-1: Kyocera Mita Scanner File Utility (Multiple) (Seth Fogie