CVE-2008-0767

ExtremeZ-IP.exe in ExtremeZ-IP File and Print Server 5.1.2x15 and earlier does not verify that a certain "number of URLs" field is consistent with the packet length, which allows remote attackers to cause a denial of service daemon crash via a large integer in this field in a packet to the Servic...

CVE-2008-0759

CVE-2008-0759 affects ExtremeZ-IP File and Print Server (ExtremeZ-IP.exe) versions up to 5.1.2x15. The vulnerability allows remote attackers to trigger a daemon crash/DoS by sending an invalid UAM field in an AFP (Apple Filing Protocol) request to TCP port 548. Exploitation details are not provid...

CVE-2008-0758

CVE-2008-0758 concerns the Zidget/HTTP embedded HTTP server in ExtremeZ-IP File and Print Server (version 5.1.2x15 and earlier). The issue is a directory traversal vulnerability that allows unauthenticated remote attackers to read arbitrary files (GIF, PNG, JPG, XML, ICO, ZIP, HTML) by using a "....

CVE-2008-0767

CVE-2008-0767 affects ExtremeZ-IP File and Print Server (ExtremeZ-IP.exe) prior to or including 5.1.2x15. The issue is that the implementation does not verify that the field indicating the number of URLs is consistent with the packet length in a UDP SLP (port 427) request, enabling a remote attac...

CVE-2008-0767: Undefined Security Weakness

ExtremeZ-IP.exe in ExtremeZ-IP File and Print Server 5.1.2x15 and earlier does not verify that a certain "number of URLs" field is consistent with the packet length, which allows remote attackers to cause a denial of service daemon crash via a large integer in this field in a packet to the Servic...

CVE-2008-0758: Improper Limitation of a Pathname to a Restricted Directory

Multiple directory traversal vulnerabilities in the Zidget/HTTP embedded HTTP server in ExtremeZ-IP File and Print Server 5.1.2x15 and earlier allow remote attackers to read arbitrary 1 gif, 2 png, 3 jpg, 4 xml, 5 ico, 6 zip, and 7 html files via a ".." dot dot backslash sequence in the filename...

CVE-2008-0759: Undefined Security Weakness

ExtremeZ-IP.exe in ExtremeZ-IP File and Print Server 5.1.2x15 and earlier allows remote attackers to cause a denial of service daemon crash via an invalid UAM field in a request to the Apple Filing Protocol AFP service on TCP port 548...