CVE:CVE-2008-0758
CNNVD:CNNVD-200802-258
ExtremeZ-IP File和Print Server的Zidget/HTTP内置的HTTP服务器存在多个目录遍历漏洞。远程攻击者可以借助文件名中的"..\"序列读取任意的(1)gif,(2)png,(3)jpg,(4)xml,(5)ico,(6)zip,和(7)html文件。
solution:Upgrade group_logic extremez-ip_file_server to a higher version than 5.1.2,and avoid the version (,5.1.2]; Upgrade group_logic extremez-ip_print_server to a higher version than 5.1.2,and avoid the version (,5.1.2]