CVE-2008-0767

CVE-2008-0767 describes a denial-of-service vulnerability in ExtremeZ-IP File and Print Server versions 5.1.2x15 and earlier. The flaw allows remote attackers to crash the daemon by sending a crafted packet to the Service Location Protocol (SLP) service on UDP port 427, exploiting an out-of-bounds read due to improper validation of a "number of URLs" field. With a CVSS score of 5.0 (medium severity), this vulnerability can be exploited remotely with low attack complexity, requiring no authentication, and resulting in a denial of service. The EPSS score indicates a low probability of exploitation in the wild, despite a high FAUCET Risk Score. There is no evidence of active exploitation (KEV, Hot List), and no Metasploit or Nuclei exploits are available. While an ExploitDB entry exists, there is no community discussion or media coverage, suggesting limited public attention and exploitation.