Description
The Scanner File Utility (aka listener) in Kyocera Mita (KM) 3.3.0.1 allows remote attackers to bypass authorization and upload arbitrary files to the client system via a modified program that does not prompt the user for a password.
References
- kyocera-scanner-program-file-upload(53004) vdb-entry
- 20080826 White Wolf Labs #080826-1: Kyocera Mita Scanner File Utility (Multiple) mailing-list
- kmscanner-requests-file-upload(44717) vdb-entry
- http://www.informit.com/guides/content.aspx?g=security&seqNum=320
- 30855 vdb-entry
- 31631 third-party-advisory