CVE-2008-0758 Multiple directory traversal vulnerabilities in the Zidget/HTTP embedded HTTP server in ExtremeZ-IP File and Print Server 5.1.2x15 and earlier allow remote attackers to read arbitrary (1) gif, (2) png...
MediumCVSS 5.0
EPSS 1.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple directory traversal vulnerabilities in the Zidget/HTTP embedded HTTP server in ExtremeZ-IP File and Print Server 5.1.2x15 and earlier allow remote attackers to read arbitrary (1) gif, (2) png, (3) jpg, (4) xml, (5) ico, (6) zip, and (7) html files via a ".." (dot dot backslash) sequence in the filename.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| group logic extremez-ip file server | <= 5.1.2 | No fix listed |
| group logic extremez-ip print server | <= 5.1.2 | No fix listed |
References
- aluigi.altervista.org
- aluigi.org
- 28862 third-party-advisory vendor-advisory
- www.grouplogic.com
- 20080211 Multiple vulnerabilities in EztremeZ-IP File and Printer Server 5.1.2x15 mailing-list
- 27718 vdb-entry
- ADV-2008-0485 vdb-entry