CVE-2008-7111: Undefined Security Weakness

The Scanner File Utility aka listener in Kyocera Mita KM 3.3.0.1 does not restrict the filenames or extensions of uploaded files, which makes it easier for remote attackers to execute arbitrary code or overwrite files by leveraging CVE-2008-7110 and CVE-2008-7109...

CVE-2008-7113: Undefined Security Weakness

The Scanner File Utility aka listener in Kyocera Mita KM 3.3.0.1 uses a small space of predictable user identification numbers for access control, which allows remote attackers to upload documents via a brute force attack...

CVE-2008-7110: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in the Scanner File Utility aka listener in Kyocera Mita KM 3.3.0.1 allows remote attackers to upload files to arbitrary locations via a .. dot dot in a request...

CVE-2008-7112: Improper Input Validation

The Scanner File Utility aka listener in Kyocera Mita KM 3.3.0.1 allows remote attackers to cause a denial of service hang or crash via invalid field length values in a malformed 1 document or 2 request...

PT-2009-2578 · Kyocera · Kyocera Mita

Name of the Vulnerable Software and Affected Versions: Kyocera Mita KM version 3.3.0.1 Description: The issue allows remote attackers to bypass authorization and upload arbitrary files to the client system via a modified program that does not prompt the user for a password. This is related to the...

Kyocera Mita Scanner File Utility Detection

The remote host is running Kyocera Mita's Scanner File Utility, an agent that runs on Windows hosts and allows Kyocera Mita multi- function devices to scan to a user's desktop. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include"compat.inc"; if descripti...

Kyocera Mita Scanner File Utility 3.3.0.1 - File Transfer Directory Traversal

source: https://www.securityfocus.com/bid/30855/info Kyocera Mita Scanner File Utility is prone to a directory-traversal vulnerability because it fails to adequately sanitize user-supplied input. Attackers can exploit this issue to create and overwrite arbitrary files on the affected computer...