Описание
Multiple buffer overflows in Client Software WinCom LPD Total 3.0.2.623 and earlier allow remote attackers to execute arbitrary code via (1) a long 0x02 command to the remote administration service on TCP port 13500 or (2) a long invalid control filename to LPDService.exe on TCP port 515.
Multiple buffer overflows in Client Software WinCom LPD Total 3.0.2.623 and earlier allow remote attackers to execute arbitrary code via (1) a long 0x02 command to the remote administration service on TCP port 13500 or (2) a long invalid control filename to LPDService.exe on TCP port 515.
Ссылки
- https://nvd.nist.gov/vuln/detail/CVE-2008-5176
- http://aluigi.org/adv/wincomalpd-adv.txt
- http://aluigi.org/poc/wincomalpd.zip
- http://secunia.com/advisories/28763
- http://securityreason.com/securityalert/4610
- http://www.securityfocus.com/archive/1/487507/100/200/threaded
- http://www.securityfocus.com/bid/27614
- http://www.vupen.com/english/advisories/2008/0410
Связанные уязвимости
Multiple buffer overflows in Client Software WinCom LPD Total 3.0.2.623 and earlier allow remote attackers to execute arbitrary code via (1) a long 0x02 command to the remote administration service on TCP port 13500 or (2) a long invalid control filename to LPDService.exe on TCP port 515.