CVE-2008-0764

Format string vulnerability in the logging function in Larson Network Print Server LstNPS 9.4.2 build 105 and earlier for Windows might allow remote attackers to execute arbitrary code via format string specifiers in a USEP command on TCP port 3114...

Stack overflow

Stack-based buffer overflow in RpmSrvc.exe in Brooks Remote Print Manager RPM 4.5.1.11 and earlier Elite and Select for Windows allows remote attackers to execute arbitrary code via a long filename in a "Receive data file" LPD command. NOTE: some of these details are obtained from third party...

CVE-2008-0766

Stack-based buffer overflow in RpmSrvc.exe in Brooks Remote Print Manager RPM 4.5.1.11 and earlier Elite and Select for Windows allows remote attackers to execute arbitrary code via a long filename in a "Receive data file" LPD command. NOTE: some of these details are obtained from third party...

CVE-2008-0763

NPSpcSVR.exe in Larson Network Print Server (LstNPS) versions up to 9.4.2 build 105 suffer a stack-based buffer overflow that can allow remote code execution. The flaw is triggered by a long argument in a LICENSE command over TCP port 3114, indicating an overlong input in a network command. Root ...

CVE-2008-0763

Stack-based buffer overflow in NPSpcSVR.exe in Larson Network Print Server LstNPS 9.4.2 build 105 and earlier allows remote attackers to execute arbitrary code via a long argument in a LICENSE command on TCP port 3114...

CVE-2008-0758

CVE-2008-0758 concerns the Zidget/HTTP embedded HTTP server in ExtremeZ-IP File and Print Server (version 5.1.2x15 and earlier). The issue is a directory traversal vulnerability that allows unauthenticated remote attackers to read arbitrary files (GIF, PNG, JPG, XML, ICO, ZIP, HTML) by using a "....

CVE-2008-0764

Format string vulnerability in the logging function in Larson Network Print Server LstNPS 9.4.2 build 105 and earlier for Windows might allow remote attackers to execute arbitrary code via format string specifiers in a USEP command on TCP port 3114...

CVE-2008-0766

CVE-2008-0766 affects Brooks Remote Print Manager (RPM) for Windows, specifically RpmSrvc.exe in RPM 4.5.1.11 and earlier (Elite and Select). The flaw is a stack-based buffer overflow triggered by a long filename in a "Receive data file" LPD command. This enables remote attackers to execute arbit...

CVE-2008-0764

CVE-2008-0764 affects Larson Network Print Server (LstNPS) for Windows, specifically version 9.4.2 build 105 and earlier. The vulnerability is a format string issue in the logging function that can be triggered via a USEP command over TCP port 3114, potentially allowing remote code execution. No ...

CVE-2008-0759

CVE-2008-0759 affects ExtremeZ-IP File and Print Server (ExtremeZ-IP.exe) versions up to 5.1.2x15. The vulnerability allows remote attackers to trigger a daemon crash/DoS by sending an invalid UAM field in an AFP (Apple Filing Protocol) request to TCP port 548. Exploitation details are not provid...

CVE-2008-0767

CVE-2008-0767 affects ExtremeZ-IP File and Print Server (ExtremeZ-IP.exe) prior to or including 5.1.2x15. The issue is that the implementation does not verify that the field indicating the number of URLs is consistent with the packet length in a UDP SLP (port 427) request, enabling a remote attac...

Brooksnet Remote Print Manager buffer overflow

Buffer overflow on oversized filename...

CVE-2008-0763: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in NPSpcSVR.exe in Larson Network Print Server LstNPS 9.4.2 build 105 and earlier allows remote attackers to execute arbitrary code via a long argument in a LICENSE command on TCP port 3114...

CVE-2008-0767: Undefined Security Weakness

ExtremeZ-IP.exe in ExtremeZ-IP File and Print Server 5.1.2x15 and earlier does not verify that a certain "number of URLs" field is consistent with the packet length, which allows remote attackers to cause a denial of service daemon crash via a large integer in this field in a packet to the Servic...

CVE-2008-0764: Use of Externally-Controlled Format String

Format string vulnerability in the logging function in Larson Network Print Server LstNPS 9.4.2 build 105 and earlier for Windows might allow remote attackers to execute arbitrary code via format string specifiers in a USEP command on TCP port 3114...

CVE-2008-0758: Improper Limitation of a Pathname to a Restricted Directory

Multiple directory traversal vulnerabilities in the Zidget/HTTP embedded HTTP server in ExtremeZ-IP File and Print Server 5.1.2x15 and earlier allow remote attackers to read arbitrary 1 gif, 2 png, 3 jpg, 4 xml, 5 ico, 6 zip, and 7 html files via a ".." dot dot backslash sequence in the filename...

CVE-2008-0759: Undefined Security Weakness

ExtremeZ-IP.exe in ExtremeZ-IP File and Print Server 5.1.2x15 and earlier allows remote attackers to cause a denial of service daemon crash via an invalid UAM field in a request to the Apple Filing Protocol AFP service on TCP port 548...

CVE-2008-0766: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in RpmSrvc.exe in Brooks Remote Print Manager RPM 4.5.1.11 and earlier Elite and Select for Windows allows remote attackers to execute arbitrary code via a long filename in a "Receive data file" LPD command. NOTE: some of these details are obtained from third party...

Unicode buffer-overflow in RPM Remote Print Manager 4.5.1.11

Luigi Auriemma Application: RPM Remote Print Manager http://lpd.brooksnet.com Versions: = 4.5.1.11 tested both the Elite and Select versions the beta version 5.0.38.0 does NOT seem vulnerable Platforms: Windows Bug: unicode buffer-overflow Exploitation: remote Date: 11 Feb 2008 Author: Luigi...

CVE-2008-0693

Stack-based buffer overflow in PQCore.exe in Print Manager Plus 2008 Client Billing and Authentication 7.0.127.16 allows remote attackers to cause a denial of service service outage via a series of long packets to TCP port 48101...