PT-2008-6304 · Wincom · Wincom Lpd

Published 2008-11-18 · Updated 2018-10-11 · CVE-2008-5159

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Client Software WinCom LPD Total version 3.0.2.623 and earlier

Description The issue is related to an integer overflow in the remote administration protocol processing, which can be exploited by remote attackers to cause a denial of service (crash) by providing a large string length argument. This action triggers memory corruption.

Recommendations For versions 3.0.2.623 and earlier, consider restricting access to the remote administration protocol until a fix is available. As a temporary workaround, limit the input length for string arguments in the protocol to prevent memory corruption. At the moment, there is no information about a newer version that contains a fix for this issue.

Exploit

Fix

Weakness Enumeration

CWE-189

Related Identifiers

CVE-2008-5159

Affected Products

Wincom Lpd

References · 11

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/lpd/wincomlpd_admin.rb · Exploit
• 🔥 https://exploit-db.com/exploits/31106 · Exploit
• 🔥 https://exploit-db.com/exploits/16335 · Exploit
• http://secunia.com/advisories/28763 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2008-5159 · Security Note
• http://aluigi.org/poc/wincomalpd.zip · Note
• http://securityfocus.com/archive/1/487507/100/200/threaded · Note
• http://securityreason.com/securityalert/4610 · Note
• http://securityfocus.com/bid/27614 · Note
• http://aluigi.org/adv/wincomalpd-adv.txt · Note
• http://vupen.com/english/advisories/2008/0410 · Note