Intrusion PreventionLANDesk.Management.Suite.Alert.Service.Buffer.Overflow
Description
This vulnerability is in LANDesk Management Suite. It could be exploited by attackers to remotely take complete control of an affected system. The issue is caused by a stack overflow error in the Alert Service (Aolnsrvr.exe) that fails to properly handle malformed data sent to port 65535/UDP, which could be exploited by remote unauthenticated attackers to execute arbitrary commands with SYSTEM privileges.
Affected Products
LANDesk Management Suite version 8.7 and prior.
Impact
System compromise.
Recommended Actions
Upgrade to the latest Service Pack and apply hotfix INST-11050687.2 :
Telemetry
Coverage
| IPS (Regular DB) | |
| IPS (Extended DB) |
| ID | 14479 |
| Created | Apr 30, 2007 |
| Updated | Nov 15, 2021 |
| Risk |
|
| CVE ID | CVE-2007-1674 |
| Exploit Prediction Score | 93.06% |
| Default Action | drop |
| Active | |
| Affected OS | Windows |
| Affected App | Other |