CVE-2008-2468 Multiple buffer overflows in the QIP Server Service (aka qipsrvr.exe) in LANDesk Management Suite, Security Suite, and Server Manager 8.8 and earlier allow remote attackers to execute arbitrary code v...
HighCVSS 10.0
EPSS 9.9%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple buffer overflows in the QIP Server Service (aka qipsrvr.exe) in LANDesk Management Suite, Security Suite, and Server Manager 8.8 and earlier allow remote attackers to execute arbitrary code via a crafted heal request, related to the StringToMap and StringSize arguments.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| landesk management suite | <= 8.8 | No fix listed |
| landesk management suite | = 8.7 | No fix listed |
| landesk security suite | <= 8.8 | No fix listed |
| landesk security suite | = 8.7 | No fix listed |
| landesk server manager | <= 8.8 | No fix listed |
| landesk server manager | = 8.7 | No fix listed |
References
- community.landesk.com patch
- dvlabs.tippingpoint.com
- 31888 third-party-advisory
- 4269 third-party-advisory
- VU#538011 third-party-advisory us-government-resource
- 20080915 TPTI-08-06: Landesk QIP Server Service Heal Packet Buffer Overflow mailing-list
- 31193 patch vdb-entry
- 1020888 vdb-entry
- ADV-2008-2588 vdb-entry
- landesk-qip-bo(45154) vdb-entry