PT-2008-6304 · Wincom · Wincom Lpd

Publicado 2008-11-18 · Atualizado 2018-10-11 · CVE-2008-5159

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Client Software WinCom LPD Total version 3.0.2.623 and earlier

Description The issue is related to an integer overflow in the remote administration protocol processing, which can be exploited by remote attackers to cause a denial of service (crash) by providing a large string length argument. This action triggers memory corruption.

Recommendations For versions 3.0.2.623 and earlier, consider restricting access to the remote administration protocol until a fix is available. As a temporary workaround, limit the input length for string arguments in the protocol to prevent memory corruption. At the moment, there is no information about a newer version that contains a fix for this issue.

Exploit

Correção

Enumeração de Fraquezas

CWE-189

Identificadores relacionados

CVE-2008-5159

Produtos afetados

Wincom Lpd

Referências · 11

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/lpd/wincomlpd_admin.rb · Exploit
• 🔥 https://exploit-db.com/exploits/31106 · Exploit
• 🔥 https://exploit-db.com/exploits/16335 · Exploit
• http://secunia.com/advisories/28763 · Aviso do Fabricante
• http://aluigi.org/poc/wincomalpd.zip · Nota
• http://securityfocus.com/archive/1/487507/100/200/threaded · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2008-5159 · Nota de Segurança
• http://securityreason.com/securityalert/4610 · Nota
• http://securityfocus.com/bid/27614 · Nota
• http://aluigi.org/adv/wincomalpd-adv.txt · Nota
• http://vupen.com/english/advisories/2008/0410 · Nota