CVE-2008-5159
Client Software WinCom LPD Total < 3.0.2.623 - Denial of Service via Large String Length Argument
Title source: llmExploitation Summary
EIP tracks 3 public exploits for CVE-2008-5159.
PoCs published by Metasploit, Luigi Auriemma, including Metasploit module exploits/windows/lpd/wincomlpd_admin.
AI-analyzed exploit summary This Metasploit module exploits a stack buffer overflow in WinComLPD <= 3.0.2 by sending an overly long authentication packet to the remote administration service on port 13500, allowing arbitrary code execution.
Description
Integer overflow in the remote administration protocol processing in Client Software WinCom LPD Total 3.0.2.623 and earlier allows remote attackers to cause a denial of service (crash) via a large string length argument, which triggers memory corruption.
Exploits (3)
This Metasploit module exploits a stack buffer overflow in WinComLPD <= 3.0.2 by sending an overly long authentication packet to the remote administration service on port 13500, allowing arbitrary code execution.
The provided text is a vulnerability description for WinComLPD Total, detailing buffer-overflow and authentication-bypass vulnerabilities. It references a binary exploit but does not contain actual exploit code.
This Metasploit module exploits a stack buffer overflow in WinComLPD <= 3.0.2 by sending an overly long authentication packet to the remote administration service on port 13500, allowing arbitrary code execution.