Description
Multiple buffer overflows in the QIP Server Service (aka qipsrvr.exe) in LANDesk Management Suite, Security Suite, and Server Manager 8.8 and earlier allow remote attackers to execute arbitrary code via a crafted heal request, related to the StringToMap and StringSize arguments.
References
- VU#538011 third-party-advisory
- http://dvlabs.tippingpoint.com/advisory/TPTI-08-06
- ADV-2008-2588 vdb-entry
- landesk-qip-bo(45154) vdb-entry
- 4269 third-party-advisory
- http://community.landesk.com/support/docs/DOC-3276
- 31193 vdb-entry
- 1020888 vdb-entry
- 31888 third-party-advisory
- 20080915 TPTI-08-06: Landesk QIP Server Service Heal Packet Buffer Overflow mailing-list