Description
Client Software WinCom LPD Total 3.0.2.623 and earlier allows remote attackers to bypass authentication and perform administrative actions via vectors involving "simply skipping the auth stage."
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
n/a n/a
n/aaffected
References
- http://aluigi.org/adv/wincomalpd-adv.txt ↗
- http://www.securityfocus.com/archive/1/487507/100/200/threaded ↗
- http://www.vupen.com/english/advisories/2008/0410 ↗
- http://secunia.com/advisories/28763 ↗
- http://www.securityfocus.com/bid/27614 ↗
- http://securityreason.com/securityalert/4610 ↗
- http://aluigi.org/poc/wincomalpd.zip ↗