CVE-2008-0767

ExtremeZ-IP.exe in ExtremeZ-IP File and Print Server 5.1.2x15 and earlier does not verify that a certain "number of URLs" field is consistent with the packet length, which allows remote attackers to cause a denial of service daemon crash via a large integer in this field in a packet to the Servic...

CVE-2008-0767

CVE-2008-0767 affects ExtremeZ-IP File and Print Server (ExtremeZ-IP.exe) prior to or including 5.1.2x15. The issue is that the implementation does not verify that the field indicating the number of URLs is consistent with the packet length in a UDP SLP (port 427) request, enabling a remote attac...

CVE-2008-0758

CVE-2008-0758 concerns the Zidget/HTTP embedded HTTP server in ExtremeZ-IP File and Print Server (version 5.1.2x15 and earlier). The issue is a directory traversal vulnerability that allows unauthenticated remote attackers to read arbitrary files (GIF, PNG, JPG, XML, ICO, ZIP, HTML) by using a "....

CVE-2008-0759

CVE-2008-0759 affects ExtremeZ-IP File and Print Server (ExtremeZ-IP.exe) versions up to 5.1.2x15. The vulnerability allows remote attackers to trigger a daemon crash/DoS by sending an invalid UAM field in an AFP (Apple Filing Protocol) request to TCP port 548. Exploitation details are not provid...