CVE-2008-0767: Extremez Print Server

Medium severity, CVSS 5.0. EPSS: 7.7% chance of exploitation in the next 30 days.

ExtremeZ-IP.exe in ExtremeZ-IP File and Print Server 5.1.2x15 and earlier does not verify that a certain "number of URLs" field is consistent with the packet length, which allows remote attackers to cause a denial of service (daemon crash) via a large integer in this field in a packet to the Service Location Protocol (SLP) service on UDP port 427, triggering an out-of-bounds read.

Affected products

• Extremez Print Server: up to and including 5.1.2
• Extremez-IP File Server: up to and including 5.1.2

Published 2008-02-13. Last modified 2026-06-16.