Lucene search

PRIOn knowledge basePRION:CVE-2008-0758

HistoryFeb 13, 2008 - 9:00 p.m.

Directory traversal

2008-02-1321:00:00

PRIOn knowledge base

www.prio-n.com

7.3 High

AI Score

Confidence

Low

0.006 Low

EPSS

Percentile

79.1%

JSON

Multiple directory traversal vulnerabilities in the Zidget/HTTP embedded HTTP server in ExtremeZ-IP File and Print Server 5.1.2x15 and earlier allow remote attackers to read arbitrary (1) gif, (2) png, (3) jpg, (4) xml, (5) ico, (6) zip, and (7) html files via a "…" (dot dot backslash) sequence in the filename.

CPENameOperatorVersion
extremez-ip_file_serverle5.1.2
extremez-ip_print_serverle5.1.2

CPE	Name	Operator	Version
	extremez-ip_file_server	le	5.1.2
	extremez-ip_print_server	le	5.1.2

References

aluigi.altervista.org/adv/ezipirla-adv.txt

aluigi.org/poc/ezipirla.zip

secunia.com/advisories/28862

www.grouplogic.com/files/ez/hot/hotFix51.cfm

www.securityfocus.com/archive/1/487952/100/0/threaded

www.securityfocus.com/bid/27718

www.vupen.com/english/advisories/2008/0485