Directory traversal vulnerability in the Scanner File Utility (aka listener) in Kyocera Mita (KM) 3.3.0.1 allows remote attackers to upload files to arbitrary locations via a .. (dot dot) in a request.
https://exchange.xforce.ibmcloud.com/vulnerabilities/44718
http://www.securityfocus.com/archive/1/495772/100/0/threaded
http://www.informit.com/guides/content.aspx?g=security&seqNum=320