Unrated severityNVD Advisory· Published Feb 13, 2008· Updated Jun 16, 2026
CVE-2008-0767
CVE-2008-0767
Description
ExtremeZ-IP.exe in ExtremeZ-IP File and Print Server 5.1.2x15 and earlier does not verify that a certain "number of URLs" field is consistent with the packet length, which allows remote attackers to cause a denial of service (daemon crash) via a large integer in this field in a packet to the Service Location Protocol (SLP) service on UDP port 427, triggering an out-of-bounds read.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3- Range: <=5.1.2x15
Patches
Vulnerability mechanics
References
7- secunia.com/advisories/28862nvdVendor Advisory
- aluigi.altervista.org/adv/ezipirla-adv.txtnvd
- aluigi.org/poc/ezipirla.zipnvd
- www.grouplogic.com/files/ez/hot/hotFix51.cfmnvd
- www.securityfocus.com/archive/1/487952/100/0/threadednvd
- www.securityfocus.com/bid/27718nvd
- www.vupen.com/english/advisories/2008/0485nvd
News mentions
0No linked articles in our index yet.