Xerox WorkCentre (Multiple Models) - Denial of Service

Xerox WorkCentre Multiple Models - Denial of Service Louhi Networks Information Security Research Security Advisory Advisory: Xerox WorkCentre multiple models Denial of Service Release Date: 2009/08/25 Last Modified: 2009/08/25 Authors: Juho Ranta [email protected] Henri Lindberg, CISA...

Xerox WorkCentre (Multiple Models) - Denial of Service

Louhi Networks Information Security Research Security Advisory Advisory: Xerox WorkCentre multiple models Denial of Service Release Date: 2009/08/25 Last Modified: 2009/08/25 Authors: Juho Ranta [email protected] Henri Lindberg, CISA [email protected] Application: Xerox WorkCentre Verifie...

PT-2008-1076 · Apple +1 · Cups +1

Name of the Vulnerable Software and Affected Versions: CUPS versions 1.3.9 and earlier cups-devel version 1.2.4 cups-libs version 1.2.4 cups-lpd version 1.2.4 cups version 1.2.4 Description: The issue allows local users, and possibly remote attackers, to cause a denial of service by adding a larg...

CVE-2008-5176

Multiple buffer overflows in Client Software WinCom LPD Total 3.0.2.623 and earlier allow remote attackers to execute arbitrary code via 1 a long 0x02 command to the remote administration service on TCP port 13500 or 2 a long invalid control filename to LPDService.exe on TCP port 515...

CVE-2008-5176

Multiple buffer overflows in Client Software WinCom LPD Total 3.0.2.623 and earlier allow remote attackers to execute arbitrary code via 1 a long 0x02 command to the remote administration service on TCP port 13500 or 2 a long invalid control filename to LPDService.exe on TCP port 515...

CVE-2008-5176

CVE-2008-5176 affects WinCom LPD Total, where multiple buffer overflows in the client and related services (WinCom LPD Total 3.0.2.623 and earlier) permit remote code execution. The exploit vectors described are: (1) sending a long 0x02 command to the remote administration service on TCP port 135...

CVE-2008-5176: Improper Restriction of Operations within the Bounds of a Memory Buffer

Multiple buffer overflows in Client Software WinCom LPD Total 3.0.2.623 and earlier allow remote attackers to execute arbitrary code via 1 a long 0x02 command to the remote administration service on TCP port 13500 or 2 a long invalid control filename to LPDService.exe on TCP port 515...

Authentication flaw

Client Software WinCom LPD Total 3.0.2.623 and earlier allows remote attackers to bypass authentication and perform administrative actions via vectors involving "simply skipping the auth stage."...

CVE-2008-5158

Client Software WinCom LPD Total 3.0.2.623 and earlier allows remote attackers to bypass authentication and perform administrative actions via vectors involving "simply skipping the auth stage."...

CVE-2008-5159

CVE-2008-5159 affects WinComLPD Total (Client Software WinCom LPD Total) up to version 3.0.2.623. The remote admin protocol processing suffers an integer overflow when handling a large string length, leading to memory corruption and remote denial of service. Public references describe a stack/rem...

CVE-2008-5158

WinComLPD Total is affected by an authentication bypass vulnerability (CVE-2008-5158) in the LPD Monitoring Server, allowing remote attackers to bypass authentication and perform administrative actions. Connected sources also enumerate additional vulnerabilities in the same product/vulnerability ...

CVE-2008-5158

Client Software WinCom LPD Total 3.0.2.623 and earlier allows remote attackers to bypass authentication and perform administrative actions via vectors involving "simply skipping the auth stage."...

CVE-2008-5158: Improper Authentication

Client Software WinCom LPD Total 3.0.2.623 and earlier allows remote attackers to bypass authentication and perform administrative actions via vectors involving "simply skipping the auth stage."...

CVE-2008-5159: Undefined Security Weakness

Integer overflow in the remote administration protocol processing in Client Software WinCom LPD Total 3.0.2.623 and earlier allows remote attackers to cause a denial of service crash via a large string length argument, which triggers memory corruption...

Solaris <= 10 LPD Arbitrary File Delete Exploit (metasploit)

No description provided by source. This file is part of the Metasploit Framework and may be redistributed according to the licenses defined in the Authors field below. In the case of an unknown or missing license, this file defaults to the same license as the core Framework dual GPLv2 and Artisti...

Code injection

The LPD server in cyan soft Opium OPI Server 4.10.1028 and earlier; cyanPrintIP Easy OPI, Professional, and Basic 4.10.1030 and earlier; Workstation 4.10.836 and earlier; and Standard 4.10.940 and earlier; allows remote attackers to cause a denial of service daemon crash via a connection that...

Format string

Format string vulnerability in the ReportSysLogEvent function in the LPD server in cyan soft Opium OPI Server 4.10.1028 and earlier; cyanPrintIP Easy OPI, Professional, and Basic 4.10.1030 and earlier; Workstation 4.10.836 and earlier; and Standard 4.10.940 and earlier; might allow remote attacke...

CVE-2008-0755

Format string vulnerability in the ReportSysLogEvent function in the LPD server in cyan soft Opium OPI Server 4.10.1028 and earlier; cyanPrintIP Easy OPI, Professional, and Basic 4.10.1030 and earlier; Workstation 4.10.836 and earlier; and Standard 4.10.940 and earlier; might allow remote attacke...

CVE-2008-0756

The LPD server in cyan soft Opium OPI Server 4.10.1028 and earlier; cyanPrintIP Easy OPI, Professional, and Basic 4.10.1030 and earlier; Workstation 4.10.836 and earlier; and Standard 4.10.940 and earlier; allows remote attackers to cause a denial of service daemon crash via a connection that...

CVE-2008-0766

Stack-based buffer overflow in RpmSrvc.exe in Brooks Remote Print Manager RPM 4.5.1.11 and earlier Elite and Select for Windows allows remote attackers to execute arbitrary code via a long filename in a "Receive data file" LPD command. NOTE: some of these details are obtained from third party...