Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Stack-based buffer overflow in the Alert Service (aolnsrvr.exe) in LANDesk Management Suite 8.7 allows remote attackers to execute arbitrary code via a crafted packet to port 65535/UDP.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
LanDesk管理套件Alert服务AOLSRVR.EXE缓冲区溢出漏洞
Vulnerability Description
Landesk管理套件是一款网络管理系统，可控制桌面，服务器和移动设备等。 LANDesk管理套件中监听在UDP/65535端口上的Alert服务在处理畸形的数据请求时存在栈溢出漏洞，远程攻击者可能利用此漏洞控制运行了LanDesk的机器。 Aolnsrvr.exe进程将用户提供的数据拷贝到了268字节的栈缓冲区，提供额外的数据就可以导致溢出和SEH覆盖。漏洞相关的内存代码拷贝如下： 0041EF49 mov edi, eax ; edi pointer to stack buffer 0041EF4B
CVSS Information
N/A
Vulnerability Type
N/A