PT-2008-6320 · Wincom · Wincom Lpd

Luigi Auriemma · Published 2008-11-20 · Updated 2018-10-11 · CVE-2008-5176

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Client Software WinCom LPD Total versions 3.0.2.623 and earlier

Description The issue allows remote attackers to execute arbitrary code due to multiple buffer overflows. This can be achieved via a long 0x02 command to the remote administration service on TCP port 13500 or a long invalid control filename to LPDService.exe on TCP port 515.

Recommendations For versions 3.0.2.623 and earlier, as a temporary workaround, consider restricting access to the remote administration service on TCP port 13500 and LPDService.exe on TCP port 515 until a patch is available. Avoid using long commands or invalid filenames in these services to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2008-5176

Affected Products

Wincom Lpd

References · 8

• 🔥 http://securityfocus.com/bid/27614 · Exploit
• 🔥 http://aluigi.org/poc/wincomalpd.zip · Exploit
• http://secunia.com/advisories/28763 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2008-5176 · Security Note
• http://aluigi.org/adv/wincomalpd-adv.txt · Note
• http://securityfocus.com/archive/1/487507/100/200/threaded · Note
• http://securityreason.com/securityalert/4610 · Note
• http://vupen.com/english/advisories/2008/0410 · Note