Server side request forgery (ssrf)

2008-02-1321:00:00

PRIOn knowledge base

www.prio-n.com

6.8 Medium

AI Score

Confidence

Low

0.016 Low

EPSS

Percentile

87.6%

JSON

ExtremeZ-IP.exe in ExtremeZ-IP File and Print Server 5.1.2x15 and earlier allows remote attackers to cause a denial of service (daemon crash) via an invalid UAM field in a request to the Apple Filing Protocol (AFP) service on TCP port 548.

CPENameOperatorVersion
extremez-ip_file_serverle5.1.2
extremez-ip_print_serverle5.1.2

CPE	Name	Operator	Version
	extremez-ip_file_server	le	5.1.2
	extremez-ip_print_server	le	5.1.2

References

aluigi.altervista.org/adv/ezipirla-adv.txt

aluigi.org/poc/ezipirla.zip

secunia.com/advisories/28862

www.grouplogic.com/files/ez/hot/hotFix51.cfm

www.securityfocus.com/archive/1/487952/100/0/threaded

www.securityfocus.com/bid/27718

www.vupen.com/english/advisories/2008/0485