CVE-2008-7109

The Scanner File Utility (aka listener) in Kyocera Mita (KM) 3.3.0.1 allows remote attackers to bypass authorization and upload arbitrary files to the client system via a modified program that does not prompt the user for a password.

• CWE-863
• CWE-863

• http://secunia.com/advisories/31631Broken Link, Vendor Advisory
• http://www.informit.com/guides/content.aspx?g=security&seqNum=320Exploit, Not Applicable
• http://www.securityfocus.com/archive/1/495772/100/0/threadedBroken Link, Third Party Advisory, VDB Entry
• http://www.securityfocus.com/bid/30855Broken Link, Exploit, Third Party Advisory, VDB Entry
• https://exchange.xforce.ibmcloud.com/vulnerabilities/44717Third Party Advisory, VDB Entry
• https://exchange.xforce.ibmcloud.com/vulnerabilities/53004Third Party Advisory, VDB Entry
• http://secunia.com/advisories/31631Broken Link, Vendor Advisory
• http://www.informit.com/guides/content.aspx?g=security&seqNum=320Exploit, Not Applicable
• http://www.securityfocus.com/archive/1/495772/100/0/threadedBroken Link, Third Party Advisory, VDB Entry
• http://www.securityfocus.com/bid/30855Broken Link, Exploit, Third Party Advisory, VDB Entry
• https://exchange.xforce.ibmcloud.com/vulnerabilities/44717Third Party Advisory, VDB Entry
• https://exchange.xforce.ibmcloud.com/vulnerabilities/53004Third Party Advisory, VDB Entry

Published

Aug 28, 2009

Last Modified

Jun 16, 2026

Status

Modified

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2008-7103Stack-based buffer overflow in an ActiveX control in najdisi…
• CVE-2008-7104Sophos PureMessage Scanner service (PMScanner.exe) in PureMe…
• CVE-2008-7105Sophos PureMessage for Microsoft Exchange 3.0 before 3.0.2 a…
• CVE-2008-7106The installation of Sophos PureMessage for Microsoft Exchang…
• CVE-2008-7107easdrv.sys in ESET Smart Security 3.0.667.0 allows local use…
• CVE-2008-7108Multiple cross-site scripting (XSS) vulnerabilities in Carmo…
• CVE-2008-7110Directory traversal vulnerability in the Scanner File Utilit…
• CVE-2008-7111The Scanner File Utility (aka listener) in Kyocera Mita (KM)…
• CVE-2008-7112The Scanner File Utility (aka listener) in Kyocera Mita (KM)…
• CVE-2008-7113The Scanner File Utility (aka listener) in Kyocera Mita (KM)…
• CVE-2008-7114SQL injection vulnerability in members_search.php in iFusion…
• CVE-2008-7115The web interface to the Belkin Wireless G router and ADSL2 …