Description
The FTP print feature in multiple Canon printers, including imageRUNNER and imagePRESS, allow remote attackers to use the server as an inadvertent proxy via a modified PORT command, aka FTP bounce.
References
- VU#568073 third-party-advisory
- 28042 vdb-entry
- JVN#10056705 third-party-advisory
- http://itso.iu.edu/20080229_Canon_MFD_FTP_bounce_attack
- 1019528 vdb-entry
- http://www.usa.canon.com/html/security/pdf/CVA-001.pdf
- JVNDB-2008-000013 third-party-advisory