|
ExtremeZ-IP File and Print Server Multiple Vulnerabilities
|
|
Secunia Advisory:
|
SA28862
|
|
|
Release Date:
|
2008-02-11
|
|
Last Update:
|
2008-02-21
|
|
Popularity:
|
2,323 views
|
|
|
Critical:
|
Less critical
|
|
Impact:
|
Exposure of system information
Exposure of sensitive information
DoS
|
|
Where:
|
From local network
|
|
Solution Status:
|
Vendor Patch
|
|
| Software: | ExtremeZ-IP File and Print Server 5.x
|
|
|
Subscribe:
|
Instant alerts on relevant vulnerabilities 
|
|
| CVE reference: | CVE-2008-0758
CVE-2008-0759
CVE-2008-0767
|
|
Description:
Luigi Auriemma has discovered some vulnerabilities in ExtremeZ-IP File and Print Server, which can be exploited by malicious people to disclose potentially sensitive information or cause a DoS (Denial of Service).
1) An input validation error in the ExtremeZ-IP Service (ExtremeZ-IP.exe) when handling SLP (Service Location Protocol) "Server Reply" functions can be exploited to crash the service via a specially crafted packet sent to default port 427/UDP.
2) An error in the ExtremeZ-IP Service when handling UAM strings in e.g. a AFP (Apple Filling Protocol) FPLogin command can be exploited to crash the service via a specially crafted packet sent to default port 548/TCP.
3) An input validation error in the ExtremeZ-IP Service when processing HTTP requests can be exploited to download certain files (e.g. .gif, .png, .jpg, .xml, .ico, .zip, .html) via directory traversal attacks.
The vulnerabilities are confirmed in version 5.1.2x15. Other versions may also be affected.
Solution:
Apply hotfix (ExtremeZ-IP 5.1.3x03).
http://www.grouplogic.com/files/ez/hot/hotFix51.cfm
Provided and/or discovered by:
Luigi Auriemma
Changelog:
2008-02-14: Added CVE reference.
2008-02-21: Updated "Solution" section.
Original Advisory:
http://aluigi.altervista.org/adv/ezipirla-adv.txt
|
|
|
Track this Secunia Advisory
|
Customers of the Secunia Vulnerability Intelligence solutions will automatically receive updates when new information regarding this advisory is released.
Read more about our Vulnerability Intelligence solutions and what they can do for you and your company.
|
|
|
About this Secunia Advisory
|
Please note: The information that this Secunia Advisory is based on comes from a third party unless stated otherwise.
Secunia collects, validates, and verifies all vulnerability reports issued by security research groups, vendors, and others.
|
