VIGILANTE-2000013.txt

`WinCOM LPD DoS  
  
Advisory Code: VIGILANTE-2000013  
  
Release Date:  
September 19, 2000  
  
Systems Affected:  
- WinCOM LPD V1.00.90 for Windows NT  
  
THE PROBLEM  
A continuos stream of LPD options, sent to the LPD port (default TCP  
port 515) on the host running WinCOM, will eventually consume all the  
memory on that host.  
  
Vendor Status:  
The vendor was contacted on the 8th of September and the vulnerability  
was verified by them on the 19th of September.   
  
Fix:  
There is currently no known release date for a fix. Vendor replied:  
  
"I do not have any release date to offer you.  
It will be fixed in a future release.  
Thank you for bringing this to our attention."  
  
Vendor URL: http://www.ipswitch.com  
Product URL: http://www.ipswitch.com/cgi/download_eval.pl  
Copyright VIGILANTe 2000-09-12  
  
Disclaimer:  
The information within this document may change without notice. Use of  
this information constitutes acceptance for use in an AS IS  
condition. There are NO warranties with regard to this information.  
In no event shall the author be liable for any consequences whatsoever  
arising out of or in connection with the use or spread of this  
information. Any use of this information lays within the user's  
responsibility.  
  
Feedback:  
Please send suggestions, updates, and comments to:  
  
VIGILANTe  
mailto: [email protected]  
http://www.vigilante.com  
`