Description
Multiple buffer overflows in Client Software WinCom LPD Total 3.0.2.623 and earlier allow remote attackers to execute arbitrary code via (1) a long 0x02 command to the remote administration service on TCP port 13500 or (2) a long invalid control filename to LPDService.exe on TCP port 515.
References
- http://aluigi.org/adv/wincomalpd-adv.txt
- 20080204 Multiple vulnerabilities in WinCom LPD Total 3.0.2.623 mailing-list
- ADV-2008-0410 vdb-entry
- 28763 third-party-advisory
- 27614 vdb-entry
- 4610 third-party-advisory
- http://aluigi.org/poc/wincomalpd.zip