PT-2008-6320 · Wincom · Wincom Lpd

Luigi Auriemma · Publicado 2008-11-20 · Atualizado 2018-10-11 · CVE-2008-5176

Positive Technologies (AI Summary)

CVSS v2.0

9.3

Alta

Vetor base

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Client Software WinCom LPD Total versions 3.0.2.623 and earlier

Description The issue allows remote attackers to execute arbitrary code due to multiple buffer overflows. This can be achieved via a long 0x02 command to the remote administration service on TCP port 13500 or a long invalid control filename to LPDService.exe on TCP port 515.

Recommendations For versions 3.0.2.623 and earlier, as a temporary workaround, consider restricting access to the remote administration service on TCP port 13500 and LPDService.exe on TCP port 515 until a patch is available. Avoid using long commands or invalid filenames in these services to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

CVE-2008-5176

Produtos afetados

Wincom Lpd

Referências · 8

• 🔥 http://securityfocus.com/bid/27614 · Exploit
• 🔥 http://aluigi.org/poc/wincomalpd.zip · Exploit
• http://aluigi.org/adv/wincomalpd-adv.txt · Nota
• http://secunia.com/advisories/28763 · Aviso do Fabricante
• http://securityfocus.com/archive/1/487507/100/200/threaded · Nota
• http://securityreason.com/securityalert/4610 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2008-5176 · Nota de Segurança
• http://vupen.com/english/advisories/2008/0410 · Nota