CVE-2008-7111

{"id": "CVE-2008-7111", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 9.3, "accessVector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:C/I:C/A:C", "authentication": "NONE", "integrityImpact": "COMPLETE", "accessComplexity": "MEDIUM", "availabilityImpact": "COMPLETE", "confidentialityImpact": "COMPLETE"}, "acInsufInfo": false, "impactScore": 10.0, "baseSeverity": "HIGH", "obtainAllPrivilege": false, "exploitabilityScore": 8.6, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2009-08-28T15:30:00.327", "references": [{"url": "http://secunia.com/advisories/31631", "tags": ["Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://www.informit.com/guides/content.aspx?g=security&seqNum=320", "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/archive/1/495772/100/0/threaded", "source": "cve@mitre.org"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/53003", "source": "cve@mitre.org"}, {"url": "http://secunia.com/advisories/31631", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.informit.com/guides/content.aspx?g=security&seqNum=320", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.securityfocus.com/archive/1/495772/100/0/threaded", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/53003", "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-264"}]}], "descriptions": [{"lang": "en", "value": "The Scanner File Utility (aka listener) in Kyocera Mita (KM) 3.3.0.1 does not restrict the filenames or extensions of uploaded files, which makes it easier for remote attackers to execute arbitrary code or overwrite files by leveraging CVE-2008-7110 and CVE-2008-7109."}, {"lang": "es", "value": "La utilidad del archivo de esc\u00e1ner (tambi\u00e9n conocido como listener) en Kyocera Mita (KM) v3.3.0.1 no restringe los nombres de archivo o extensiones de los archivos subidos, lo que permite ejecutar c\u00f3digo arbitrario a los atacantes remotos o sobrescribir archivos aprovechando CVE-2008-7110 y CVE-2008-7109."}], "lastModified": "2024-11-21T00:58:18.140", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:kyoceramita:scanner_file_utility:3.3.0.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B9F14BBB-2781-438F-9C56-EE7006676E81"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}