CVE-2008-5176 Multiple buffer overflows in Client Software WinCom LPD Total 3.0.2.623 and earlier allow remote attackers to execute arbitrary code via (1) a long 0x02 command to the remote administration service on...
HighCVSS 9.3
EPSS 5.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple buffer overflows in Client Software WinCom LPD Total 3.0.2.623 and earlier allow remote attackers to execute arbitrary code via (1) a long 0x02 command to the remote administration service on TCP port 13500 or (2) a long invalid control filename to LPDService.exe on TCP port 515.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| clientsoftware wincom mpd total | <= 3.0.2.623 | No fix listed |
References
- aluigi.org
- aluigi.org exploit
- 28763 third-party-advisory vendor-advisory
- 4610 third-party-advisory
- 20080204 Multiple vulnerabilities in WinCom LPD Total 3.0.2.623 mailing-list
- 27614 exploit vdb-entry
- ADV-2008-0410 vdb-entry