CVE-2008-0767: Undefined Security Weakness

ExtremeZ-IP.exe in ExtremeZ-IP File and Print Server 5.1.2x15 and earlier does not verify that a certain "number of URLs" field is consistent with the packet length, which allows remote attackers to cause a denial of service daemon crash via a large integer in this field in a packet to the Servic...

Unicode buffer-overflow in RPM Remote Print Manager 4.5.1.11

Luigi Auriemma Application: RPM Remote Print Manager http://lpd.brooksnet.com Versions: = 4.5.1.11 tested both the Elite and Select versions the beta version 5.0.38.0 does NOT seem vulnerable Platforms: Windows Bug: unicode buffer-overflow Exploitation: remote Date: 11 Feb 2008 Author: Luigi...

CVE-2008-0758: Improper Limitation of a Pathname to a Restricted Directory

Multiple directory traversal vulnerabilities in the Zidget/HTTP embedded HTTP server in ExtremeZ-IP File and Print Server 5.1.2x15 and earlier allow remote attackers to read arbitrary 1 gif, 2 png, 3 jpg, 4 xml, 5 ico, 6 zip, and 7 html files via a ".." dot dot backslash sequence in the filename...

CVE-2008-0766: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in RpmSrvc.exe in Brooks Remote Print Manager RPM 4.5.1.11 and earlier Elite and Select for Windows allows remote attackers to execute arbitrary code via a long filename in a "Receive data file" LPD command. NOTE: some of these details are obtained from third party...

CVE-2008-0759: Undefined Security Weakness

ExtremeZ-IP.exe in ExtremeZ-IP File and Print Server 5.1.2x15 and earlier allows remote attackers to cause a denial of service daemon crash via an invalid UAM field in a request to the Apple Filing Protocol AFP service on TCP port 548...

CVE-2008-0764: Use of Externally-Controlled Format String

Format string vulnerability in the logging function in Larson Network Print Server LstNPS 9.4.2 build 105 and earlier for Windows might allow remote attackers to execute arbitrary code via format string specifiers in a USEP command on TCP port 3114...

CVE-2008-0693

Stack-based buffer overflow in PQCore.exe in Print Manager Plus 2008 Client Billing and Authentication 7.0.127.16 allows remote attackers to cause a denial of service service outage via a series of long packets to TCP port 48101...

Stack overflow

Stack-based buffer overflow in PQCore.exe in Print Manager Plus 2008 Client Billing and Authentication 7.0.127.16 allows remote attackers to cause a denial of service service outage via a series of long packets to TCP port 48101...

ExtremeZ-IP File and Print Server Zidget/HTTP Server Traversal Arbitrary File Access

The remote host is running ExtremeZ-IP, a file- and print-server for Windows. The version of ExtremeZ-IP includes a web server, which provides access to the Zidget widget and master list and is affected by a limited directory traversal vulnerability. By leveraging this issue, an unauthenticated,...

Larson Software Technology Network Print Server multiple security vulnerabilities

Format string vulnerability and buffer overflow...

Format string and buffer-overflow in Lst Network Print Server 9.4.2 build 105

Luigi Auriemma Application: Larson Software Technology Network Print Server http://www.cgmlarson.com/products/NetworkPrintServer.php Versions: = 9.4.2 build 105 Platforms: Windows Bugs: A format string in logging B license buffer-overflow Exploitation: remote Date: 11 Feb 2008 Author: Luigi...

CVE-2008-0693

Stack-based buffer overflow in PQCore.exe in Print Manager Plus 2008 Client Billing and Authentication 7.0.127.16 allows remote attackers to cause a denial of service service outage via a series of long packets to TCP port 48101...

Grouplogic EztremeZ-IP file and print server multiple security vulnerabilities

DoS conditions, directory traversal...

CVE-2008-0693: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in PQCore.exe in Print Manager Plus 2008 Client Billing and Authentication 7.0.127.16 allows remote attackers to cause a denial of service service outage via a series of long packets to TCP port 48101...

CVE-2008-0693

CVE-2008-0693 : A stack-based buffer overflow in PQCore.exe within Print Manager Plus 2008 Client Billing and Authentication 7.0.127.16 can be triggered by a sequence of long TCP packets to port 48101, allowing remote attackers to cause a denial-of-service (service outage). Publicly disclosed det...

Design/Logic Flaw

The DOC.print function in the Adobe JavaScript API, as used by Adobe Acrobat and Reader before 8.1.2, allows remote attackers to configure silent non-interactive printing, and trigger the printing of an arbitrary number of copies of a document. NOTE: this issue might be subsumed by CVE-2008-0655...

Larson Network Print Server 9.4.2 build 105 - LstNPS Logging Function USEP Command Remote Format String

Larson Network Print Server 9.4.2 build 105 - LstNPS Logging Function USEP Command Remote Format String source: https://www.securityfocus.com/bid/27732/info Larson Software Technology Network Print Server is prone to a format-string vulnerability and a buffer-overflow vulnerability. An attacker c...

Larson Network Print Server 9.4.2 build 105 (LstNPS) - NPSpcSVR.exe License Command Remote Overflow

Larson Network Print Server 9.4.2 build 105 LstNPS - NPSpcSVR.exe License Command Remote Overflow source: https://www.securityfocus.com/bid/27732/info Larson Software Technology Network Print Server is prone to a format-string vulnerability and a buffer-overflow vulnerability. An attacker can...

Larson Network Print Server 9.4.2 build 105 (LstNPS) - 'NPSpcSVR.exe' License Command Remote Overflow

source: https://www.securityfocus.com/bid/27732/info Larson Software Technology Network Print Server is prone to a format-string vulnerability and a buffer-overflow vulnerability. An attacker can exploit these issues to execute arbitrary code within the context of the affected application or cras...

larson-poc.txt

Luigi Auriemma Application: Larson Software Technology Network Print Server http://www.cgmlarson.com/products/NetworkPrintServer.php Versions: = 9.4.2 build 105 Platforms: Windows Bugs: A format string in logging B license buffer-overflow Exploitation: remote Date: 11 Feb 2008 Author: Luigi...