CVE-2007-1674
LANDesk Management Suite 8.7 - Remote Code Execution via Crafted UDP Packet to Alert Service
Title source: llmExploitation Summary
EIP tracks 3 public exploits for CVE-2007-1674.
PoCs published by Metasploit, Aaron Portnoy, including Metasploit module exploits/windows/misc/landesk_aolnsrvr.
AI-analyzed exploit summary This exploit targets a stack buffer overflow in LANDesk Management Suite 8.7's Alert Service via UDP port 65535. It includes techniques to bypass NX (DEP) on certain targets and delivers a payload for remote code execution.
Description
Stack-based buffer overflow in the Alert Service (aolnsrvr.exe) in LANDesk Management Suite 8.7 allows remote attackers to execute arbitrary code via a crafted packet to port 65535/UDP.
Exploits (3)
This exploit targets a stack buffer overflow in LANDesk Management Suite 8.7's Alert Service via UDP port 65535. It includes techniques to bypass NX (DEP) on certain targets and delivers a payload for remote code execution.
This Metasploit module exploits a stack-based buffer overflow in LANDesk Management Suite 8.7's Alert Service via UDP port 65535. It includes techniques to bypass NX (DEP) on certain targets and delivers a payload for remote code execution with SYSTEM privileges.
This Metasploit module exploits a stack buffer overflow in LANDesk Management Suite 8.7's Alert Service via UDP port 65535. It includes payload handling for both NX-enabled and non-NX targets, demonstrating reliable remote code execution.