CVE-2008-0767

Severity CVSS v4.0:
Pending analysis
Type:
CWE-189 Numeric Errors
Publication date:
13/02/2008
Last modified:
09/04/2025

Description

ExtremeZ-IP.exe in ExtremeZ-IP File and Print Server 5.1.2x15 and earlier does not verify that a certain "number of URLs" field is consistent with the packet length, which allows remote attackers to cause a denial of service (daemon crash) via a large integer in this field in a packet to the Service Location Protocol (SLP) service on UDP port 427, triggering an out-of-bounds read.

Vulnerable products and versions

CPE From Up to
cpe:2.3:a:extremez:print_server:*:*:*:*:*:*:*:* 5.1.2 (including)
cpe:2.3:a:extremez-ip:file_server:*:*:*:*:*:*:*:* 5.1.2 (including)