CVE-2008-2468
Multiple buffer overflows in the QIP Server Service (aka qipsrvr.exe) in LANDesk Management Suite, Security Suite, and Server Manager 8.8 and earlier allow remote attackers to execute arbitrary code via a crafted heal request, related to the StringToMap…
Does this matter?
High impact if exploited, but EPSS currently rates exploitation as unlikely (9.88%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.
Description
Multiple buffer overflows in the QIP Server Service (aka qipsrvr.exe) in LANDesk Management Suite, Security Suite, and Server Manager 8.8 and earlier allow remote attackers to execute arbitrary code via a crafted heal request, related to the StringToMap and StringSize arguments.
- CVSS 2.0
- 10.0 HIGHAV:N/AC:L/Au:N/C:C/I:C/A:C
- EPSS
- 9.88% probability · 95th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-119
- Affected
- landesk/landesk management suite · landesk/landesk security suite · landesk/landesk server manager
- Source
- cret@cert.org
References
- http://community.landesk.com/support/docs/DOC-3276Patch
- http://dvlabs.tippingpoint.com/advisory/TPTI-08-06
- http://secunia.com/advisories/31888
- http://securityreason.com/securityalert/4269
- http://www.kb.cert.org/vuls/id/538011US Government Resource
- http://www.securityfocus.com/archive/1/496369/100/0/threaded
- http://www.securityfocus.com/bid/31193Patch
- http://www.securitytracker.com/id?1020888
- http://www.vupen.com/english/advisories/2008/2588
- https://exchange.xforce.ibmcloud.com/vulnerabilities/45154
- http://community.landesk.com/support/docs/DOC-3276Patch
- http://dvlabs.tippingpoint.com/advisory/TPTI-08-06
- http://secunia.com/advisories/31888
- http://securityreason.com/securityalert/4269
- http://www.kb.cert.org/vuls/id/538011US Government Resource
- http://www.securityfocus.com/archive/1/496369/100/0/threaded
- http://www.securityfocus.com/bid/31193Patch
- http://www.securitytracker.com/id?1020888
- http://www.vupen.com/english/advisories/2008/2588
- https://exchange.xforce.ibmcloud.com/vulnerabilities/45154
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.