Test Kennung:	1.3.6.1.4.1.25623.1.0.800063
Kategorie:	Denial of Service
Titel:	WinComLPD Total Multiple Vulnerabilities
Zusammenfassung:	This host is installed with WinComLPD Total and is prone to buffer; overflow and authentication bypass vulnerabilities.
Beschreibung:	Summary: This host is installed with WinComLPD Total and is prone to buffer overflow and authentication bypass vulnerabilities. Vulnerability Insight: The issues are due to: - an error in Line Printer Daemon Service (LPDService.exe), when processing print jobs with an overly long control file on default TCP port 515/13500. - an error in authentication checks in the Line Printer Daemon (LPD). Vulnerability Impact: Successful exploitation could allow execution of arbitrary code or crashing the remote wincomlpd service by simply using negative values like 0x80/0xff for the 8 bit numbers and 0x8000/0xffff for the data blocks. Affected Software/OS: WinCom LPD Total 3.0.2.623 and prior on Windows. Solution: No known solution was made available for at least one year since the disclosure of this vulnerability. Likely none will be provided anymore. General solution options are to upgrade to a newer release, disable respective features, remove the product or replace the product by another one. CVSS Score: 10.0 CVSS Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Querverweis:	BugTraq ID: 27614 Common Vulnerability Exposure (CVE) ID: CVE-2008-5158 http://www.securityfocus.com/bid/27614 Bugtraq: 20080204 Multiple vulnerabilities in WinCom LPD Total 3.0.2.623 (Google Search) http://www.securityfocus.com/archive/1/487507/100/200/threaded http://aluigi.org/adv/wincomalpd-adv.txt http://aluigi.org/poc/wincomalpd.zip http://secunia.com/advisories/28763 http://securityreason.com/securityalert/4610 http://www.vupen.com/english/advisories/2008/0410 Common Vulnerability Exposure (CVE) ID: CVE-2008-5159 Common Vulnerability Exposure (CVE) ID: CVE-2008-5176
Copyright	Copyright (C) 2008 Greenbone Networks GmbH

Dies ist nur einer von 99761 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.