2 matches found
Directory traversal
Multiple directory traversal vulnerabilities in the Zidget/HTTP embedded HTTP server in ExtremeZ-IP File and Print Server 5.1.2x15 and earlier allow remote attackers to read arbitrary 1 gif, 2 png, 3 jpg, 4 xml, 5 ico, 6 zip, and 7 html files via a ".." dot dot backslash sequence in the filename...
CVE-2008-0758
CVE-2008-0758 concerns the Zidget/HTTP embedded HTTP server in ExtremeZ-IP File and Print Server (version 5.1.2x15 and earlier). The issue is a directory traversal vulnerability that allows unauthenticated remote attackers to read arbitrary files (GIF, PNG, JPG, XML, ICO, ZIP, HTML) by using a "....